Microsoft Microsoft SharePoint Foundation
56 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2020-1444 | 2013 Service Pack 1 | A remote code execution vulnerability exists in the way Microsoft SharePoint software parses specially crafted email messages, aka 'Microsof | MEDIUM 4.3 | 9.0 % | ||
| CVE-2020-1443 | 2013 Service Pack 1 | A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected S | MEDIUM 5.4 | 1.7 % | ||
| CVE-2020-1439 | 2013 Service Pack 1 | A remote code execution vulnerability exists in PerformancePoint Services for SharePoint Server when the software fails to check the source | HIGH 8.8 | 20 % | ||
| CVE-2020-1323 | 2013 Service Pack 1 | An open redirect vulnerability exists in Microsoft SharePoint that could lead to spoofing.To exploit the vulnerability, an attacker could se | MEDIUM 6.1 | 2.2 % | ||
| CVE-2020-1320 | 2013 Service Pack 1 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques | MEDIUM 5.4 | 1.5 % | ||
| CVE-2020-1318 | 2010 Service Pack 2 ; 2013 Service Pack 1 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques | MEDIUM 5.4 | 1.5 % | ||
| CVE-2020-1298 | 2010 Service Pack 2 ; 2013 Service Pack 1 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques | MEDIUM 5.4 | 1.5 % | ||
| CVE-2020-1297 | 2010 Service Pack 2 ; 2013 Service Pack 1 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques | MEDIUM 5.4 | 1.5 % | ||
| CVE-2020-1289 | 2010 Service Pack 2 | A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected S | MEDIUM 5.4 | 1.5 % | ||
| CVE-2020-1183 | 2013 Service Pack 1 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques | MEDIUM 5.4 | 1.5 % | ||
| CVE-2020-1181 | 2010 Service Pack 2 ; 2013 Service Pack 1 | A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net web | HIGH 8.8 | 69 % | ||
| CVE-2020-1177 | 2013 Service Pack 1 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques | MEDIUM 5.4 | 1.5 % | ||
| CVE-2020-0978 | 2013 Service Pack 1 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques | MEDIUM 5.4 | 1.5 % | ||
| CVE-2020-0976 | 2013 Service Pack 1 | A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected S | MEDIUM 5.4 | 2.2 % | ||
| CVE-2020-0975 | 2010 Service Pack 2 ; 2013 Service Pack 1 | A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected S | MEDIUM 5.4 | 1.6 % | ||
| CVE-2020-0972 | 2010 Service Pack 2 ; 2013 Service Pack 1 | A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected S | MEDIUM 5.4 | 1.6 % | ||
| CVE-2020-0971 | 2010 Service Pack 2 ; 2013 Service Pack 1 | A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application pa | HIGH 8.8 | 13 % | ||
| CVE-2020-0933 | 2013 Service Pack 1 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques | MEDIUM 5.4 | 1.5 % | ||
| CVE-2020-0932 | 2013 Service Pack 1 | A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application pa | HIGH 8.8 | 36 % | ||
| CVE-2020-0931 | 2013 Service Pack 1 | A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application pa | HIGH 8.8 | 11 % | ||
| CVE-2020-0929 | 2010 Service Pack 2 ; 2013 Service Pack 1 | A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application pa | HIGH 8.8 | 11 % | ||
| CVE-2020-0925 | 2010 Service Pack 2 ; 2013 Service Pack 1 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques | MEDIUM 5.4 | 1.5 % | ||
| CVE-2020-0924 | 2013 Service Pack 1 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques | MEDIUM 5.4 | 1.8 % | ||
| CVE-2020-0923 | 2013 Service Pack 1 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques | MEDIUM 5.4 | 1.5 % | ||
| CVE-2020-0920 | 2010 Service Pack 2 ; 2013 Service Pack 1 | A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application pa | HIGH 8.8 | 10 % | ||
| CVE-2020-0894 | 2010 Service Pack 2 ; 2013 Service Pack 1 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques | MEDIUM 5.4 | 1.3 % | ||
| CVE-2020-0892 | 2013 Service Pack 1 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft W | HIGH 7.8 | 12 % | ||
| CVE-2020-0891 | 2010 Service Pack 2 ; 2013 Service Pack 1 | This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server. | MEDIUM 5.4 | 1.5 % | ||
| CVE-2020-0850 | | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft W | HIGH 8.8 | 8.8 % | ||
| CVE-2020-0795 | 2013 Service Pack 1 | This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server. | MEDIUM 5.4 | 1.5 % | ||
| CVE-2019-1443 | 2010 Service Pack 2 ; 2013 Service Pack 1 | An information disclosure vulnerability exists in Microsoft SharePoint when an attacker uploads a specially crafted file to the SharePoint S | MEDIUM 6.5 | 5.7 % | ||
| CVE-2019-1330 | 2013 Service Pack 1 | An elevation of privilege vulnerability exists in Microsoft SharePoint, aka 'Microsoft SharePoint Elevation of Privilege Vulnerability'. Thi | MEDIUM 6.5 | 2.6 % | ||
| CVE-2019-1329 | 2010 Service Pack 2 ; 2013 Service Pack 1 | An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request t | MEDIUM 5.4 | 1.5 % | ||
| CVE-2019-1328 | 2010 Service Pack 2 ; 2013 Service Pack 1 | A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected S | MEDIUM 5.4 | 1.5 % | ||
| CVE-2019-1070 | 2013 Service Pack 1 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques | MEDIUM 5.4 | 1.5 % | ||
| CVE-2019-1296 | 2013 Service Pack 1 | A remote code execution vulnerability exists in Microsoft SharePoint where APIs aren't properly protected from unsafe data input, aka 'Micro | HIGH 8.8 | 8.3 % | ||
| CVE-2019-1295 | 2010 Service Pack 2 ; 2013 Service Pack 1 | A remote code execution vulnerability exists in Microsoft SharePoint where APIs aren't properly protected from unsafe data input, aka 'Micro | HIGH 8.8 | 8.3 % | ||
| CVE-2019-1262 | 2013 Service Pack 1 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques | MEDIUM 5.4 | 3.0 % | ||
| CVE-2019-1261 | 2013 Service Pack 1 | A spoofing vulnerability exists in Microsoft SharePoint when it improperly handles requests to authorize applications, resulting in cross-si | HIGH 8.8 | 1.6 % | ||
| CVE-2019-1260 | 2010 Service Pack 2 ; 2013 Service Pack 1 | An elevation of privilege vulnerability exists in Microsoft SharePoint, aka 'Microsoft SharePoint Elevation of Privilege Vulnerability'. | MEDIUM 6.5 | 2.6 % | ||
| CVE-2019-1259 | 2013 Service Pack 1 | A spoofing vulnerability exists in Microsoft SharePoint when it improperly handles requests to authorize applications, resulting in cross-si | HIGH 8.8 | 1.5 % | ||
| CVE-2019-1257 | 2010 Service Pack 2 ; 2013 Service Pack 1 | A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application pa | HIGH 8.8 | 12 % | ||
| CVE-2019-1006 | 2010 Service Pack 2 ; 2013 Service Pack 1 | An authentication bypass vulnerability exists in Windows Communication Foundation (WCF) and Windows Identity Foundation (WIF), allowing sign | HIGH 7.5 | 6.1 % | ||
| CVE-2019-0963 | 2013 Service Pack 1 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques | MEDIUM 5.4 | 1.6 % | ||
| CVE-2019-0958 | 2013 Service Pack 1 | An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request t | HIGH 8.8 | 3.3 % | ||
| CVE-2019-0956 | 2013 Service Pack 1 | An information disclosure vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request t | MEDIUM 6.5 | 5.2 % | ||
| CVE-2019-0952 | 2013 Service Pack 1 | A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net web | HIGH 8.8 | 9.6 % | ||
| CVE-2019-0951 | 2010 Service Pack 2 ; 2013 Service Pack 1 | A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected S | MEDIUM 5.4 | 1.6 % | ||
| CVE-2019-0950 | 2013 Service Pack 1 | A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected S | MEDIUM 5.7 | 2.5 % | ||
| CVE-2019-0949 | 2013 Service Pack 1 | A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected S | MEDIUM 5.7 | 2.5 % | ||
| CVE-2019-0831 | 2010 Service Pack 2 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques | MEDIUM 5.4 | 1.6 % | ||
| CVE-2019-0830 | 2013 Service Pack 1 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques | MEDIUM 5.4 | 1.6 % | ||
| CVE-2019-0778 | 2013 Service Pack 1 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques | MEDIUM 5.4 | 1.7 % | ||
| CVE-2019-0670 | 2013 Service Pack 1 | A spoofing vulnerability exists in Microsoft SharePoint when the application does not properly parse HTTP content, aka 'Microsoft SharePoint | MEDIUM 6.1 | 2.5 % | ||
| CVE-2019-0604 | 2013 Service Pack 1 | A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application pa | CRITICAL 9.8 | 100 % | KEV | |
| CVE-2019-0594 | 2013 Service Pack 1 | A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application pa | HIGH 8.8 | 12 % |