Microsoft Microsoft SharePoint Server
84 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2020-1456 | 2019 ; 2010 Service Pack 2 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques | MEDIUM 5.4 | 2.2 % | ||
| CVE-2020-1454 | 2019 | This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server. | MEDIUM 5.4 | 1.6 % | ||
| CVE-2020-1451 | 2019 ; 2010 Service Pack 2 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques | MEDIUM 5.4 | 1.6 % | ||
| CVE-2020-1450 | 2019 ; 2010 Service Pack 2 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques | MEDIUM 5.4 | 1.6 % | ||
| CVE-2020-1448 | 2019 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft W | HIGH 8.8 | 10.0 % | ||
| CVE-2020-1447 | 2019 ; 2010 Service Pack 2 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft W | HIGH 8.8 | 11 % | ||
| CVE-2020-1446 | 2019 ; 2010 Service Pack 2 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft W | HIGH 8.8 | 11 % | ||
| CVE-2020-1445 | 2019 ; 2010 Service Pack 2 | An information disclosure vulnerability exists when Microsoft Office improperly discloses the contents of its memory, aka 'Microsoft Office | MEDIUM 5.5 | 6.1 % | ||
| CVE-2020-1444 | 2019 | A remote code execution vulnerability exists in the way Microsoft SharePoint software parses specially crafted email messages, aka 'Microsof | MEDIUM 4.3 | 9.0 % | ||
| CVE-2020-1443 | 2019 | A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected S | MEDIUM 5.4 | 1.7 % | ||
| CVE-2020-1439 | 2019 ; 2010 Service Pack 2 | A remote code execution vulnerability exists in PerformancePoint Services for SharePoint Server when the software fails to check the source | HIGH 8.8 | 20 % | ||
| CVE-2020-1342 | 2019 ; 2010 Service Pack 2 | An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, wh | MEDIUM 5.5 | 6.4 % | ||
| CVE-2020-1147 | 2019 ; 2010 Service Pack 2 | A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the | HIGH 7.8 | 94 % | KEV | |
| CVE-2020-1323 | 2019 | An open redirect vulnerability exists in Microsoft SharePoint that could lead to spoofing.To exploit the vulnerability, an attacker could se | MEDIUM 6.1 | 2.2 % | ||
| CVE-2020-1320 | 2019 ; 2010 Service Pack 2 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques | MEDIUM 5.4 | 1.5 % | ||
| CVE-2020-1318 | 2019 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques | MEDIUM 5.4 | 1.5 % | ||
| CVE-2020-1298 | 2019 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques | MEDIUM 5.4 | 1.5 % | ||
| CVE-2020-1297 | 2019 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques | MEDIUM 5.4 | 1.5 % | ||
| CVE-2020-1295 | 2019 | An elevation of privilege vulnerability exists in Microsoft SharePoint, aka 'Microsoft SharePoint Elevation of Privilege Vulnerability'. | HIGH 8.8 | 3.0 % | ||
| CVE-2020-1183 | 2019 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques | MEDIUM 5.4 | 1.5 % | ||
| CVE-2020-1181 | 2019 | A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net web | HIGH 8.8 | 69 % | ||
| CVE-2020-1178 | 2010 Service Pack 2 ; 2019 | An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted authenticatio | HIGH 8.8 | 3.1 % | ||
| CVE-2020-1177 | 2019 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques | MEDIUM 5.4 | 1.5 % | ||
| CVE-2020-1148 | 2019 ; 2010 Service Pack 2 | A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected S | MEDIUM 5.4 | 1.4 % | ||
| CVE-2020-0980 | 2019 ; 2010 Service Pack 2 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft W | HIGH 7.8 | 12 % | ||
| CVE-2020-0978 | 2019 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques | MEDIUM 5.4 | 1.5 % | ||
| CVE-2020-0977 | 2019 | A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected S | MEDIUM 5.4 | 1.6 % | ||
| CVE-2020-0975 | 2019 | A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected S | MEDIUM 5.4 | 1.6 % | ||
| CVE-2020-0974 | 2019 | A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application pa | HIGH 8.8 | 11 % | ||
| CVE-2020-0973 | 2019 ; 2010 Service Pack 2 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques | MEDIUM 5.4 | 1.5 % | ||
| CVE-2020-0972 | 2019 | A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected S | MEDIUM 5.4 | 1.6 % | ||
| CVE-2020-0971 | 2019 | A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application pa | HIGH 8.8 | 13 % | ||
| CVE-2020-0954 | 2019 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques | MEDIUM 5.4 | 1.5 % | ||
| CVE-2020-0933 | 2019 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques | MEDIUM 5.4 | 1.5 % | ||
| CVE-2020-0932 | 2019 | A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application pa | HIGH 8.8 | 36 % | ||
| CVE-2020-0931 | 2019 | A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application pa | HIGH 8.8 | 11 % | ||
| CVE-2020-0930 | 2019 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques | MEDIUM 5.4 | 1.5 % | ||
| CVE-2020-0929 | 2019 | A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application pa | HIGH 8.8 | 11 % | ||
| CVE-2020-0927 | 2019 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques | MEDIUM 5.4 | 1.5 % | ||
| CVE-2020-0926 | 2019 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques | MEDIUM 5.4 | 1.5 % | ||
| CVE-2020-0925 | 2019 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques | MEDIUM 5.4 | 1.5 % | ||
| CVE-2020-0924 | 2019 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques | MEDIUM 5.4 | 1.8 % | ||
| CVE-2020-0923 | 2019 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques | MEDIUM 5.4 | 1.5 % | ||
| CVE-2020-0920 | 2019 | A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application pa | HIGH 8.8 | 10 % | ||
| CVE-2020-0894 | 2019 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques | MEDIUM 5.4 | 1.3 % | ||
| CVE-2020-0893 | 2019 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques | MEDIUM 5.4 | 1.3 % | ||
| CVE-2020-0892 | 2019 ; 2010 Service Pack 2 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft W | HIGH 7.8 | 12 % | ||
| CVE-2020-0891 | 2019 | This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server. | MEDIUM 5.4 | 1.5 % | ||
| CVE-2020-0852 | 2019 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft W | HIGH 7.8 | 12 % | ||
| CVE-2020-0850 | 2019 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft W | HIGH 8.8 | 8.8 % | ||
| CVE-2020-0694 | 2019 ; 2013 Service Pack 1 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques | MEDIUM 5.4 | 1.6 % | ||
| CVE-2020-0693 | 2019 ; 2013 Service Pack 1 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques | MEDIUM 5.4 | 1.6 % | ||
| CVE-2019-1443 | 2019 | An information disclosure vulnerability exists in Microsoft SharePoint when an attacker uploads a specially crafted file to the SharePoint S | MEDIUM 6.5 | 5.7 % | ||
| CVE-2019-1442 | 2019 | A security feature bypass vulnerability exists when Microsoft Office does not validate URLs.An attacker could send a victim a specially craf | MEDIUM 5.5 | 2.2 % | ||
| CVE-2019-1330 | 2019 | An elevation of privilege vulnerability exists in Microsoft SharePoint, aka 'Microsoft SharePoint Elevation of Privilege Vulnerability'. Thi | MEDIUM 6.5 | 2.6 % | ||
| CVE-2019-1296 | 2019 | A remote code execution vulnerability exists in Microsoft SharePoint where APIs aren't properly protected from unsafe data input, aka 'Micro | HIGH 8.8 | 8.3 % | ||
| CVE-2019-1295 | 2019 | A remote code execution vulnerability exists in Microsoft SharePoint where APIs aren't properly protected from unsafe data input, aka 'Micro | HIGH 8.8 | 8.3 % | ||
| CVE-2019-1261 | 2019 | A spoofing vulnerability exists in Microsoft SharePoint when it improperly handles requests to authorize applications, resulting in cross-si | HIGH 8.8 | 1.6 % | ||
| CVE-2019-1260 | 2019 | An elevation of privilege vulnerability exists in Microsoft SharePoint, aka 'Microsoft SharePoint Elevation of Privilege Vulnerability'. | MEDIUM 6.5 | 2.6 % | ||
| CVE-2019-1257 | 2019 | A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application pa | HIGH 8.8 | 12 % | ||
| CVE-2019-1134 | 2019 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques | MEDIUM 5.4 | 1.6 % | ||
| CVE-2019-1006 | | An authentication bypass vulnerability exists in Windows Communication Foundation (WCF) and Windows Identity Foundation (WIF), allowing sign | HIGH 7.5 | 6.1 % | ||
| CVE-2019-0958 | 2019 | An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request t | HIGH 8.8 | 3.3 % | ||
| CVE-2019-0957 | 2019 | An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request t | HIGH 8.8 | 3.3 % | ||
| CVE-2019-0831 | 2010 Service Pack 2 ; 2019 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques | MEDIUM 5.4 | 1.6 % | ||
| CVE-2019-0830 | 2019 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques | MEDIUM 5.4 | 1.6 % | ||
| CVE-2019-0604 | 2010 Service Pack 2 ; 2019 | A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application pa | CRITICAL 9.8 | 100 % | KEV | |
| CVE-2019-0594 | 2010 Service Pack 2 ; 2019 | A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application pa | HIGH 8.8 | 12 % | ||
| CVE-2019-0585 | | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft W | HIGH 8.8 | 22 % | ||
| CVE-2019-0562 | 2019 | An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request t | MEDIUM 5.4 | 1.7 % | ||
| CVE-2019-0558 | 2019 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques | MEDIUM 5.4 | 2.0 % | ||
| CVE-2018-8635 | 2010 Service Pack 2 | An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted authenticatio | HIGH 8.8 | 6.1 % | ||
| CVE-2018-8628 | | A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in memory, | HIGH 7.8 | 16 % | ||
| CVE-2018-8572 | 2019 | An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request t | MEDIUM 5.4 | 1.6 % | ||
| CVE-2018-8568 | 2019 | An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request t | MEDIUM 5.4 | 2.3 % | ||
| CVE-2018-8539 | 2010 Service Pack 2 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft W | HIGH 7.8 | 19 % | ||
| CVE-2018-8504 | 2010 Service Pack 2 | A remote code execution vulnerability exists in Microsoft Word software when the software fails to properly handle objects in Protected View | HIGH 8.8 | 20 % | ||
| CVE-2018-8431 | 2010 Service Pack 2 | An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request t | MEDIUM 5.4 | 2.3 % | ||
| CVE-2018-8426 | 2010 Service Pack 2 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques | MEDIUM 5.4 | 2.3 % | ||
| CVE-2018-8378 | 2013 Service Pack 1 | An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, wh | MEDIUM 5.5 | 7.3 % | ||
| CVE-2018-8168 | 2010 Service Pack 2 | An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request t | MEDIUM 5.4 | 2.5 % | ||
| CVE-2018-8149 | 2010 Service Pack 2 | An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request t | MEDIUM 5.4 | 2.8 % | ||
| CVE-2018-1032 | 2010 Service Pack 2 | An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request t | MEDIUM 5.4 | 2.2 % | ||
| CVE-2018-1028 | 2013 Service Pack 1 | A remote code execution vulnerability exists when the Office graphics component improperly handles specially crafted embedded fonts, aka "Mi | HIGH 8.8 | 19 % |