Sharepoint Server

CVEs (672)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2020-1445	Microsoft Office	Med	0.36	5.5	0.06	Jul 14, 2020	An information disclosure vulnerability exists when Microsoft Office improperly discloses the contents of its memory, aka 'Microsoft Office Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1342.
CVE-2020-1342	Microsoft Office	Med	0.36	5.5	0.06	Jul 14, 2020	An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory, aka 'Microsoft Office Information Disclosure Vulnerability'. This CVE ID is unique from…
CVE-2019-1446	Microsoft Excel	Med	0.36	5.5	0.08	Nov 12, 2019	An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel Information Disclosure Vulnerability'.
CVE-2019-1442	Microsoft Office	Med	0.36	5.5	0.02	Nov 12, 2019	A security feature bypass vulnerability exists when Microsoft Office does not validate URLs.An attacker could send a victim a specially crafted file, which could trick the victim into entering credentials, aka 'Microsoft Office Security Feature Bypass Vulnerability'.
CVE-2019-0561	Microsoft Word	Med	0.36	5.5	0.08	Jan 8, 2019	An information disclosure vulnerability exists when Microsoft Word macro buttons are used improperly, aka "Microsoft Word Information Disclosure Vulnerability." This affects Microsoft Word, Office 365 ProPlus, Microsoft Office, Word.
CVE-2018-8627	Microsoft Office	Med	0.36	5.5	0.08	Dec 12, 2018	An information disclosure vulnerability exists when Microsoft Excel software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory, aka "Microsoft Excel Information Disclosure Vulnerability." This affects Microsoft Office, Office…
CVE-2018-8378	Microsoft Office	Med	0.36	5.5	0.08	Aug 15, 2018	An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory, aka "Microsoft Office Information Disclosure Vulnerability." This affects Word, Microsoft…
CVE-2016-0011	Microsoft Sharepoint Server	Med	0.36	5.4	0.05	Jan 13, 2016	Microsoft SharePoint Server 2013 SP1 and SharePoint Foundation 2013 SP1 allow remote authenticated users to bypass intended Access Control Policy restrictions and conduct cross-site scripting (XSS) attacks by modifying a webpart, aka "Microsoft SharePoint Security Feature…
CVE-2026-48560	Microsoft Sharepoint Server	Med	0.35	5.4	0.01	Jun 9, 2026	Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-47639	Microsoft Office SharePoint	Med	0.35	5.4	0.01	Jun 9, 2026	Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-47636	Microsoft Office SharePoint	Med	0.35	5.4	0.01	Jun 9, 2026	Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-45465	Microsoft Office SharePoint	Med	0.35	5.4	0.01	Jun 9, 2026	Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-45464	Microsoft Office SharePoint	Med	0.35	5.4	0.01	Jun 9, 2026	Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-45453	Microsoft Office SharePoint	Med	0.35	5.4	0.01	Jun 9, 2026	Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-33113	Microsoft Office SharePoint	Med	0.35	5.4	0.01	Jun 9, 2026	Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-20958	Microsoft Office SharePoint	Med	0.35	5.4	0.00	Jan 13, 2026	Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
CVE-2023-21743	Microsoft Sharepoint Server	Med	0.35	5.3	0.01	Jan 10, 2023	Microsoft SharePoint Server Security Feature Bypass Vulnerability
CVE-2021-40482	Microsoft Sharepoint Server	Med	0.35	5.3	0.02	Oct 13, 2021	Microsoft SharePoint Server Information Disclosure Vulnerability
CVE-2021-34519	Microsoft Sharepoint Server	Med	0.35	5.3	0.06	Jul 14, 2021	Microsoft SharePoint Server Information Disclosure Vulnerability
CVE-2021-34517	Microsoft Sharepoint Server	Med	0.35	5.3	0.02	Jul 14, 2021	Microsoft SharePoint Server Spoofing Vulnerability

CVE-2020-1445MedJul 14, 2020
Microsoft
Office
risk 0.36cvss 5.5epss 0.06
An information disclosure vulnerability exists when Microsoft Office improperly discloses the contents of its memory, aka 'Microsoft Office Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1342.
CVE-2020-1342MedJul 14, 2020
Microsoft
Office
risk 0.36cvss 5.5epss 0.06
An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory, aka 'Microsoft Office Information Disclosure Vulnerability'. This CVE ID is unique from…
CVE-2019-1446MedNov 12, 2019
Microsoft
Excel
risk 0.36cvss 5.5epss 0.08
An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel Information Disclosure Vulnerability'.
CVE-2019-1442MedNov 12, 2019
Microsoft
Office
risk 0.36cvss 5.5epss 0.02
A security feature bypass vulnerability exists when Microsoft Office does not validate URLs.An attacker could send a victim a specially crafted file, which could trick the victim into entering credentials, aka 'Microsoft Office Security Feature Bypass Vulnerability'.
CVE-2019-0561MedJan 8, 2019
Microsoft
Word
risk 0.36cvss 5.5epss 0.08
An information disclosure vulnerability exists when Microsoft Word macro buttons are used improperly, aka "Microsoft Word Information Disclosure Vulnerability." This affects Microsoft Word, Office 365 ProPlus, Microsoft Office, Word.
CVE-2018-8627MedDec 12, 2018
Microsoft
Office
risk 0.36cvss 5.5epss 0.08
An information disclosure vulnerability exists when Microsoft Excel software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory, aka "Microsoft Excel Information Disclosure Vulnerability." This affects Microsoft Office, Office…
CVE-2018-8378MedAug 15, 2018
Microsoft
Office
risk 0.36cvss 5.5epss 0.08
An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory, aka "Microsoft Office Information Disclosure Vulnerability." This affects Word, Microsoft…
CVE-2016-0011MedJan 13, 2016
Microsoft
Sharepoint Server
risk 0.36cvss 5.4epss 0.05
Microsoft SharePoint Server 2013 SP1 and SharePoint Foundation 2013 SP1 allow remote authenticated users to bypass intended Access Control Policy restrictions and conduct cross-site scripting (XSS) attacks by modifying a webpart, aka "Microsoft SharePoint Security Feature…
CVE-2026-48560MedJun 9, 2026
Microsoft
Sharepoint Server
risk 0.35cvss 5.4epss 0.01
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-47639MedJun 9, 2026
Microsoft
Office SharePoint
risk 0.35cvss 5.4epss 0.01
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-47636MedJun 9, 2026
Microsoft
Office SharePoint
risk 0.35cvss 5.4epss 0.01
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-45465MedJun 9, 2026
Microsoft
Office SharePoint
risk 0.35cvss 5.4epss 0.01
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-45464MedJun 9, 2026
Microsoft
Office SharePoint
risk 0.35cvss 5.4epss 0.01
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-45453MedJun 9, 2026
Microsoft
Office SharePoint
risk 0.35cvss 5.4epss 0.01
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-33113MedJun 9, 2026
Microsoft
Office SharePoint
risk 0.35cvss 5.4epss 0.01
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-20958MedJan 13, 2026
Microsoft
Office SharePoint
risk 0.35cvss 5.4epss 0.00
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
CVE-2023-21743MedJan 10, 2023
Microsoft
Sharepoint Server
risk 0.35cvss 5.3epss 0.01
Microsoft SharePoint Server Security Feature Bypass Vulnerability
CVE-2021-40482MedOct 13, 2021
Microsoft
Sharepoint Server
risk 0.35cvss 5.3epss 0.02
Microsoft SharePoint Server Information Disclosure Vulnerability
CVE-2021-34519MedJul 14, 2021
Microsoft
Sharepoint Server
risk 0.35cvss 5.3epss 0.06
Microsoft SharePoint Server Information Disclosure Vulnerability
CVE-2021-34517MedJul 14, 2021
Microsoft
Sharepoint Server
risk 0.35cvss 5.3epss 0.02
Microsoft SharePoint Server Spoofing Vulnerability

Page 20 of 34