Microsoft Microsoft SharePoint
35 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2019-0585 | Enterprise Server 2013 Service Pack 1 ; Enterprise Server 2016 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft W | HIGH 8.8 | 22 % | ||
| CVE-2019-0562 | Enterprise Server 2013 Service Pack 1 ; Enterprise Server 2016 | An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request t | MEDIUM 5.4 | 1.7 % | ||
| CVE-2019-0558 | Enterprise Server 2013 Service Pack 1 ; Enterprise Server 2016 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques | MEDIUM 5.4 | 2.0 % | ||
| CVE-2019-0557 | Enterprise Server 2016 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques | MEDIUM 5.4 | 2.1 % | ||
| CVE-2019-0556 | Enterprise Server 2013 Service Pack 1 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques | MEDIUM 5.4 | 1.6 % | ||
| CVE-2018-8650 | Enterprise Server 2016 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques | MEDIUM 5.4 | 1.6 % | ||
| CVE-2018-8635 | Enterprise Server 2013 Service Pack 1 ; Enterprise Server 2016 | An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted authenticatio | HIGH 8.8 | 6.1 % | ||
| CVE-2018-8628 | Enterprise Server 2016 | A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in memory, | HIGH 7.8 | 16 % | ||
| CVE-2018-8580 | Enterprise Server 2013 Service Pack 1 ; Enterprise Server 2016 ; Foundation 2010 Service Pack 2 | An information disclosure vulnerability exists where certain modes of the search function in Microsoft SharePoint Server are vulnerable to c | MEDIUM 4.3 | 4.4 % | ||
| CVE-2018-8578 | Enterprise Server 2013 Service Pack 1 | An information disclosure vulnerability exists when Microsoft SharePoint Server improperly discloses its folder structure when rendering spe | MEDIUM 4.3 | 4.9 % | ||
| CVE-2018-8572 | Enterprise Server 2016 ; Foundation 2013 Service Pack 1 | An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request t | MEDIUM 5.4 | 1.6 % | ||
| CVE-2018-8568 | Enterprise Server 2013 Service Pack 1 ; Enterprise Server 2016 | An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request t | MEDIUM 5.4 | 2.3 % | ||
| CVE-2018-8518 | Enterprise Server 2013 Service Pack 1 ; Enterprise Server 2016 | An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request t | MEDIUM 5.4 | 2.8 % | ||
| CVE-2018-8498 | Enterprise Server 2013 Service Pack 1 ; Enterprise Server 2016 | An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request t | MEDIUM 5.4 | 2.3 % | ||
| CVE-2018-8488 | Enterprise Server 2013 Service Pack 1 ; Enterprise Server 2016 | An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request t | MEDIUM 5.4 | 2.3 % | ||
| CVE-2018-8480 | Enterprise Server 2016 | An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request t | MEDIUM 5.4 | 2.3 % | ||
| CVE-2018-8431 | Enterprise Server 2013 Service Pack 1 ; Enterprise Server 2016 | An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request t | MEDIUM 5.4 | 2.3 % | ||
| CVE-2018-8428 | Enterprise Server 2013 Service Pack 1 ; Enterprise Server 2016 | An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request t | MEDIUM 5.4 | 1.7 % | ||
| CVE-2018-8426 | Enterprise Server 2013 Service Pack 1 ; Enterprise Server 2016 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques | MEDIUM 5.4 | 2.3 % | ||
| CVE-2018-8378 | Enterprise Server 2013 Service Pack 1 ; Enterprise Server 2016 | An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, wh | MEDIUM 5.5 | 7.3 % | ||
| CVE-2018-8323 | Enterprise Server 2013 Service Pack 1 ; Enterprise Server 2016 | An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request t | MEDIUM 5.4 | 2.5 % | ||
| CVE-2018-8300 | Enterprise Server 2016 ; Foundation 2013 Service Pack 1 | A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application pa | HIGH 8.8 | 14 % | ||
| CVE-2018-8299 | Enterprise Server 2013 Service Pack 1 ; Enterprise Server 2016 ; Foundation 2013 Service Pack 1 | An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request t | MEDIUM 5.4 | 2.5 % | ||
| CVE-2018-8254 | Enterprise Server 2016 ; Foundation 2013 Service Pack 1 | An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request t | MEDIUM 5.4 | 2.7 % | ||
| CVE-2018-8252 | Enterprise Server 2016 ; Foundation 2013 Service Pack 1 | An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request t | MEDIUM 5.4 | 2.7 % | ||
| CVE-2018-8168 | Enterprise Server 2013 Service Pack 1 | An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request t | MEDIUM 5.4 | 2.5 % | ||
| CVE-2018-8161 | Enterprise Server 2016 | A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka | HIGH 7.8 | 21 % | ||
| CVE-2018-8156 | Enterprise Server 2016 | An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request t | MEDIUM 5.4 | 2.8 % | ||
| CVE-2018-8155 | Enterprise Server 2016 ; Foundation 2013 Service Pack 1 | An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request t | MEDIUM 5.4 | 2.8 % | ||
| CVE-2018-8149 | Enterprise Server 2013 Service Pack 1 ; Enterprise Server 2016 | An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request t | MEDIUM 5.4 | 2.8 % | ||
| CVE-2018-1034 | Enterprise Server 2016 | An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request t | MEDIUM 5.4 | 2.2 % | ||
| CVE-2018-1032 | Enterprise Server 2013 Service Pack 1 ; Enterprise Server 2016 | An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request t | MEDIUM 5.4 | 2.2 % | ||
| CVE-2018-1028 | Enterprise Server 2016 | A remote code execution vulnerability exists when the Office graphics component improperly handles specially crafted embedded fonts, aka "Mi | HIGH 8.8 | 19 % | ||
| CVE-2018-1014 | Enterprise Server 2013 Service Pack 1 ; Enterprise Server 2016 | An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request t | MEDIUM 5.4 | 2.2 % | ||
| CVE-2018-1005 | Enterprise Server 2013 Service Pack 1 ; Enterprise Server 2016 | An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request t | MEDIUM 5.4 | 2.2 % |