What is the severity of CVE-2014-2816?

CVE-2014-2816 has a medium severity rating due to its potential for privilege escalation through a Trojan horse app.

How do I fix CVE-2014-2816?

To remediate CVE-2014-2816, ensure that all security updates for Microsoft SharePoint Server 2013 and SharePoint Foundation 2013 are applied.

Who is affected by CVE-2014-2816?

CVE-2014-2816 affects remote authenticated users of Microsoft SharePoint Server 2013 and SharePoint Foundation 2013.

What is the nature of CVE-2014-2816 vulnerability?

CVE-2014-2816 is a vulnerability that allows privilege escalation through executing custom actions in the SharePoint extensibility model.

Is there a workaround for CVE-2014-2816?

Currently, there are no specific workarounds for CVE-2014-2816 and users should apply the latest patches from Microsoft.

Vulnerability/
CVE-2014-2816

critical

9.3

CWE

264

12/8/2014

6/8/2024

CVE-2014-2816

First published: Tue Aug 12 2014(Updated: )

Microsoft SharePoint Server 2013 Gold and SP1 and SharePoint Foundation 2013 Gold and SP1 allow remote authenticated users to gain privileges via a Trojan horse app that executes a custom action in the context of the SharePoint extensibility model, aka "SharePoint Page Content Vulnerability."

Credit: secure@microsoft.com

Affected Software	Affected Version	How to fix
Microsoft SharePoint Foundation 2013	=2013
Microsoft SharePoint Foundation 2013	=2013-sp1
Microsoft SharePoint Server 2010	=2013
Microsoft SharePoint Server 2010	=2013-sp1

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2014-2816?
CVE-2014-2816 has a medium severity rating due to its potential for privilege escalation through a Trojan horse app.
How do I fix CVE-2014-2816?
To remediate CVE-2014-2816, ensure that all security updates for Microsoft SharePoint Server 2013 and SharePoint Foundation 2013 are applied.
Who is affected by CVE-2014-2816?
CVE-2014-2816 affects remote authenticated users of Microsoft SharePoint Server 2013 and SharePoint Foundation 2013.
What is the nature of CVE-2014-2816 vulnerability?
CVE-2014-2816 is a vulnerability that allows privilege escalation through executing custom actions in the SharePoint extensibility model.
Is there a workaround for CVE-2014-2816?
Currently, there are no specific workarounds for CVE-2014-2816 and users should apply the latest patches from Microsoft.

agent/references
agent/type
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/severity
agent/weakness
agent/author
agent/last-modified-date
agent/description
agent/first-publish-date
agent/event
agent/source
agent/tags
collector/nvd-index
agent/software-canonical-lookup-request
vendor/microsoft
canonical/microsoft sharepoint foundation 2013
version/microsoft sharepoint foundation 2013/2013
version/microsoft sharepoint foundation 2013/2013-sp1
canonical/microsoft sharepoint server 2010
version/microsoft sharepoint server 2010/2013
version/microsoft sharepoint server 2010/2013-sp1

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.