Microsoft SharePoint Vulnerability Audit – July 2025

Select Top 1000000 tblAssets.AssetID,
tblAssets.AssetName,
tblAssets.Domain,
tblAssets.Username,
tblAssets.Userdomain,
Coalesce(tsysOS.Image, tsysAssetTypes.AssetTypeIcon10) As icon,
tblAssets.IPAddress,
tsysIPLocations.IPLocation,
tblAssetCustom.Manufacturer,
tblAssetCustom.Model,
tsysOS.OSname As OS,
tblAssets.Version,
tblAssets.SP,
tblSoftwareUni.softwareName,
tblSoftwareUni.SoftwarePublisher,
tblSoftware.softwareVersion,
Case
When Cast(ParseName(tblSoftware.softwareVersion, 4) As int) > 16 Then 'Safe'
When Cast(ParseName(tblSoftware.softwareVersion, 4) As int) = 16 And Cast(ParseName(tblSoftware.softwareVersion, 2) As int) > 18526 Then 'Safe'
When Cast(ParseName(tblSoftware.softwareVersion, 4) As int) = 16 And Cast(ParseName(tblSoftware.softwareVersion, 2) As int) = 18526 and Cast(ParseName(tblSoftware.softwareVersion, 1) As int) >= 20508 Then 'Safe'

When Cast(ParseName(tblSoftware.softwareVersion, 4) As int) = 16 And Cast(ParseName(tblSoftware.softwareVersion, 2) As int) < 14326 and Cast(ParseName(tblSoftware.softwareVersion, 2) As int) > 10417 Then 'Safe'
When Cast(ParseName(tblSoftware.softwareVersion, 4) As int) = 16 And Cast(ParseName(tblSoftware.softwareVersion, 2) As int) < 14326 and Cast(ParseName(tblSoftware.softwareVersion, 2) As int) = 10417 and Cast(ParseName(tblSoftware.softwareVersion, 1) As int) >= 20037 Then 'Safe'

When Cast(ParseName(tblSoftware.softwareVersion, 4) As int) = 16 And Cast(ParseName(tblSoftware.softwareVersion, 2) As int) < 10337 and Cast(ParseName(tblSoftware.softwareVersion, 2) As int) > 5513 Then 'Safe'
When Cast(ParseName(tblSoftware.softwareVersion, 4) As int) = 16 And Cast(ParseName(tblSoftware.softwareVersion, 2) As int) < 10337 and Cast(ParseName(tblSoftware.softwareVersion, 2) As int) = 5513 and Cast(ParseName(tblSoftware.softwareVersion, 1) As int) >= 1001 Then 'Safe'
Else 'Vulnerable'
End As [Vulnerable/Safe],
Case
When tblErrors.ErrorText Is Not Null Or
tblErrors.ErrorText != '' Then
'Scanning Error: ' + tsysasseterrortypes.ErrorMsg
Else ''
End As ScanningErrors,
'#000000' As foregroundcolor,
tblAssets.Lastseen,
tblAssets.Lasttried
From tblAssets
Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID
Inner Join tsysAssetTypes On tsysAssetTypes.AssetType = tblAssets.Assettype
Inner Join tsysIPLocations On tsysIPLocations.LocationID =
tblAssets.LocationID
Inner Join tblState On tblState.State = tblAssetCustom.State
Inner Join tblSoftware On tblSoftware.AssetID = tblAssets.AssetID
Inner Join dbo.tblSoftwareUni On tblSoftware.softID = tblSoftwareUni.SoftID
Left Join tsysOS On tsysOS.OScode = tblAssets.OScode
Left Join (Select Distinct Top 1000000 tblErrors.AssetID As ID,
Max(tblErrors.Teller) As ErrorID
From tblErrors
Group By tblErrors.AssetID) As ScanningError On tblAssets.AssetID =
ScanningError.ID
Left Join tblErrors On ScanningError.ErrorID = tblErrors.Teller
Left Join tsysasseterrortypes On tsysasseterrortypes.Errortype =
tblErrors.ErrorType
Where tblSoftwareUni.softwareName Like '%Sharepoint%' And
tblState.Statename = 'Active' and tblSoftwareUni.SoftwarePublisher like '%Microsoft%'
Order By tblAssets.Domain,
tblAssets.AssetName