QID 150496

Microsoft SharePoint is a web-based collaborative platform that integrates with Microsoft Office, primarily used as a document management and storage system.

Multiple Vulnerabilities are identified in affected versions of Microsoft SharePoint applications running on target system :
CVE-2019-1330 : Elevation of Privilege Vulnerability when an authenticated attacker would send a specially crafted request to an affected server, thereby allowing the impersonation of another SharePoint user.

CVE-2019-1331 : Remote code execution vulnerability exists in Microsoft SharePoint due to improper handling of objects in memory.

CVE-2019-1070 : Cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint does not properly sanitize a specially crafted web request to an affected SharePoint server.

CVE-2019-1328 : Spoofing vulnerability exists when Microsoft SharePoint does not properly sanitize a specially crafted web request to an affected SharePoint server.

CVE-2019-1329 : Elevation of privilege vulnerability exists when Microsoft SharePoint due to improve sanitization of specially crafted web request.

CVE-2019-0604 : Remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SharePoint application pool and the SharePoint server farm account.

Affected Products:
Microsoft SharePoint Server 2019
Microsoft SharePoint Server 2013 Service Pack 1
Microsoft SharePoint Server 2010 Service Pack 2
Microsoft SharePoint Foundation 2013 Service Pack 1
Microsoft SharePoint Foundation 2010 Service Pack 2
Microsoft SharePoint Enterprise Server 2016

QID Detection Logic (Unauthenticated):
This QID checks the "MicrosoftSharePointTeamServices" HTTP Request header to determine vulnerable version of Microsoft SharePoint running on the target system.

Successful exploitation of these vulnerabilities could allows an attacker to execute arbitrary code on the target system.