<p>A tampering vulnerability exists when Microsoft SharePoint Server fails to properly handle profile data. An attacker who successfully exploited this vulnerability could modify a targeted user's profile data.</p> <p>To exploit the vulnerability, an attacker would need to be authenticated on an affected SharePoint Server. The attacker would then need to send a specially modified request to the server, targeting a specific user.</p> <p>The security update addresses the vulnerability by modifying how Microsoft SharePoint Server handles profile data.</p>
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Microsoft Sharepoint | — | Download and install Microsoft KB4484506Download and install Microsoft KB4484505 | May 15, 2023 | Sep 11, 2020 |
| Msft | — | Security Update for 2010 Microsoft Business Productivity Servers (KB4486664)Security Update for Microsoft SharePoint Enterprise Server 2013 (KB4484515) | Sep 8, 2020 | Sep 8, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub