The Microsoft office Product is missing security updates. It is, therefore, affected by multiple vulnerabilities:

  - Microsoft Office Remote Code Execution Vulnerability (CVE-2021-1711)

  - Microsoft Excel Remote Code Execution Vulnerability (CVE-2021-1714)

  - Microsoft Word Remote Code Execution Vulnerability (CVE-2021-1715, CVE-2021-1716)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Microsoft Word Products are missing security updates. It is, therefore, affected by multiple vulnerabilities:

  - A remote code execution vulnerability. An attacker can     exploit this to bypass authentication and execute     unauthorized arbitrary commands. (CVE-2021-1715,     CVE-2021-1716)

The Microsoft Office Online Server or Microsoft Office Web Apps installation on the remote host is missing security updates. It is, therefore, affected by a remote code execution vulnerability. An attacker can exploit this to execute arbitrary code when a maliciously modified file is opened. (CVE-2021-1713, CVE-2021-1714, CVE-2021-1715, CVE-2021-1716)

The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities:

  - A session spoofing vulnerability exists. An attacker can exploit this to perform actions with the     privileges of another user. (CVE-2021-1641, CVE-2021-1717)

  - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges.
    (CVE-2021-1712, CVE-2021-1719)

  - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute     unauthorized arbitrary commands. (CVE-2021-1707, CVE-2021-1715, CVE-2021-1716)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version   number.

The Microsoft SharePoint Server 2010 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities:

  - An unspecified tampering vulnerability. (CVE-2021-1718)

  - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute     unauthorized arbitrary commands. (CVE-2021-1707, CVE-2021-1715, CVE-2021-1716)     Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version   number.

The Microsoft SharePoint Server 2013 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities:

  - A session spoofing vulnerability exists. An attacker can exploit this to perform actions with the     privileges of another user. (CVE-2021-1641, CVE-2021-1717)

  - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute     unauthorized arbitrary commands. (CVE-2021-1707, CVE-2021-1714, CVE-2021-1715, CVE-2021-1716)

  - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges.
    (CVE-2021-1712)     Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version   number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
162047	Security Updates for Microsoft Office Products C2R (January 2021)	Nessus	Windows	2022/6/10	2023/10/20	high
162057	Security Updates for Microsoft Word Products C2R (January 2021)	Nessus	Windows	2022/6/10	2023/10/20	high
144883	Security Updates for Microsoft Office Online Server and Microsoft Office Web Apps (January 2021)	Nessus	Windows : Microsoft Bulletins	2021/1/12	2024/1/30	high
145091	Security Updates for Microsoft SharePoint Server 2016 (January 2021)	Nessus	Windows : Microsoft Bulletins	2021/1/20	2024/6/6	high
145093	Security Updates for Microsoft SharePoint Server 2010 (January 2021)	Nessus	Windows : Microsoft Bulletins	2021/1/20	2024/11/29	high
145094	Security Updates for Microsoft SharePoint Server 2013 (January 2021)	Nessus	Windows : Microsoft Bulletins	2021/1/20	2022/12/5	high

检测

插件搜索

high

high

high

high

high

high