Yuhao Weng

**Name of the Vulnerable Software and Affected Versions** Microsoft Exchange Server (affected versions not specified) **Description** The issue is related to insufficient access controls in Microsoft Exchange Server, which can be exploited by a remote attacker to elevate their privileges. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft SharePoint Server (affected versions not specified) **Description** The issue is related to insufficient input validation in Microsoft SharePoint Server, which can be exploited by a remote attacker to execute arbitrary code. This can be achieved through the deserialization of untrusted data. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents where this issue was exploited. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft SharePoint Foundation, SharePoint Server, and SharePoint Enterprise Server (affected versions not specified) **Description** The issue is related to insufficient input validation in Microsoft SharePoint products, allowing a remote attacker to execute arbitrary code. This can be achieved through the deserialization of untrusted data. The estimated number of potentially affected devices worldwide is not available. There is no information provided about real-world incidents where this issue was exploited. Technical details about exploitation include the potential for remote code execution, but specific API endpoints, vulnerable parameters, or function names are not mentioned. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft SharePoint Server (affected versions not specified) **Description** The issue is related to a Remote Code Execution vulnerability in Microsoft SharePoint Server. It is caused by incorrect code generation management. Exploitation of this issue may allow a remote attacker to execute arbitrary code using a specially crafted request. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft SharePoint Server (affected versions not specified) **Description** The issue is related to incorrect code generation management in Microsoft SharePoint Server, Microsoft SharePoint Foundation, and SharePoint Enterprise Server. This can allow a remote attacker to execute arbitrary code. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Exchange Server versions 2013 through 2019 **Description** The issue is related to a remote code execution vulnerability in Microsoft Exchange Server, caused by insufficient validation of commandlet arguments. This allows a remote attacker to execute arbitrary code. There have been limited targeted attacks using this vulnerability in the wild. The vulnerability exists due to issues with the validation of cmdlet arguments, and exploitation requires authentication to a vulnerable Exchange Server. **Recommendations** For Microsoft Exchange Server versions 2013 through 2019, update to a version that includes the security updates released in November 2021 to resolve the issue. As a temporary workaround, consider restricting access to the vulnerable cmdlet arguments until a patch is available. Restrict access to the Exchange Server to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Microsoft SharePoint Server (affected versions not specified) **Description** The issue is related to incorrect code generation management in Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server. This allows a remote attacker to execute arbitrary code. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft SharePoint (affected versions not specified) **Description** The issue is related to insufficient input validation in Microsoft SharePoint, which can be exploited by a remote attacker to cause a denial of service. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server (affected versions not specified) Description: The issue is related to insufficient input validation in Microsoft SharePoint Server, allowing a remote attacker to execute arbitrary code. This can be exploited by a remote attacker, enabling them to run arbitrary code. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft SharePoint Server (affected versions not specified) **Description** The issue is related to insufficient access control in Microsoft SharePoint Server, which can be exploited by a remote attacker to impact the confidentiality, integrity, and availability of protected information. A tampering vulnerability allows attackers to affect the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.