Sharepoint Server
by Microsoft
CVEs (672)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2021-42309 | Hig | 0.57 | 8.8 | 0.03 | Dec 15, 2021 | Microsoft SharePoint Server Remote Code Execution Vulnerability | ||
| CVE-2021-24072 | Hig | 0.57 | 8.8 | 0.02 | Feb 25, 2021 | Microsoft SharePoint Server Remote Code Execution Vulnerability | ||
| CVE-2021-1707 | Hig | 0.57 | 8.8 | 0.04 | Jan 12, 2021 | Microsoft SharePoint Server Remote Code Execution Vulnerability | ||
| CVE-2020-17121 | Hig | 0.57 | 8.8 | 0.03 | Dec 10, 2020 | Microsoft SharePoint Remote Code Execution Vulnerability | ||
| CVE-2020-16946 | Hig | 0.57 | 8.7 | 0.02 | Oct 16, 2020 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to… | ||
| CVE-2020-16945 | Hig | 0.57 | 8.7 | 0.02 | Oct 16, 2020 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to… | ||
| CVE-2020-16944 | Hig | 0.57 | 8.7 | 0.02 | Oct 16, 2020 | This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server. An authenticated attacker could exploit this vulnerability by sending a specially crafted request to an affected SharePoint… | ||
| CVE-2020-1295 | Hig | 0.57 | 8.8 | 0.03 | Jun 9, 2020 | An elevation of privilege vulnerability exists in Microsoft SharePoint, aka 'Microsoft SharePoint Elevation of Privilege Vulnerability'. | ||
| CVE-2020-1178 | Hig | 0.57 | 8.8 | 0.03 | Jun 9, 2020 | An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted authentication request to an affected SharePoint server, aka 'Microsoft SharePoint Server Elevation of Privilege Vulnerability'. | ||
| CVE-2019-1261 | Hig | 0.57 | 8.8 | 0.02 | Sep 11, 2019 | A spoofing vulnerability exists in Microsoft SharePoint when it improperly handles requests to authorize applications, resulting in cross-site request forgery (CSRF).To exploit this vulnerability, an attacker would need to create a page specifically designed to cause a… | ||
| CVE-2019-1259 | Hig | 0.57 | 8.8 | 0.01 | Sep 11, 2019 | A spoofing vulnerability exists in Microsoft SharePoint when it improperly handles requests to authorize applications, resulting in cross-site request forgery (CSRF).To exploit this vulnerability, an attacker would need to create a page specifically designed to cause a… | ||
| CVE-2019-0958 | Hig | 0.57 | 8.8 | 0.03 | May 16, 2019 | An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0957. | ||
| CVE-2019-0957 | Hig | 0.57 | 8.8 | 0.03 | May 16, 2019 | An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0958. | ||
| CVE-2017-11876 | Hig | 0.57 | 8.8 | 0.02 | Nov 15, 2017 | Microsoft Project Server and Microsoft SharePoint Enterprise Server 2016 allow an attacker to use cross-site forgery to read content that they are not authorized to read, use the victim's identity to take actions on the web application on behalf of the victim, such as change… | ||
| CVE-2026-32201 | Med | 0.56 | 6.5 | 0.23 | KEV | Apr 14, 2026 | Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network. | |
| CVE-2023-28288 | Hig | 0.56 | 8.1 | 0.06 | Apr 11, 2023 | Microsoft SharePoint Server Spoofing Vulnerability | ||
| CVE-2021-40487 | Hig | 0.56 | 8.1 | 0.48 | Oct 13, 2021 | Microsoft SharePoint Server Remote Code Execution Vulnerability | ||
| CVE-2020-16951 | Hig | 0.56 | 8.6 | 0.01 | Oct 16, 2020 | A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SharePoint application… | ||
| CVE-2020-1460 | Hig | 0.56 | 8.6 | 0.04 | Sep 11, 2020 | A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net web controls. An authenticated attacker who successfully exploited the vulnerability could use a specially crafted page to perform actions… | ||
| CVE-2020-1453 | Hig | 0.56 | 8.6 | 0.02 | Sep 11, 2020 | A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SharePoint application… |
- risk 0.57cvss 8.8epss 0.03
Microsoft SharePoint Server Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.02
Microsoft SharePoint Server Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.04
Microsoft SharePoint Server Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.03
Microsoft SharePoint Remote Code Execution Vulnerability
- risk 0.57cvss 8.7epss 0.02
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to…
- risk 0.57cvss 8.7epss 0.02
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to…
- risk 0.57cvss 8.7epss 0.02
This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server. An authenticated attacker could exploit this vulnerability by sending a specially crafted request to an affected SharePoint…
- risk 0.57cvss 8.8epss 0.03
An elevation of privilege vulnerability exists in Microsoft SharePoint, aka 'Microsoft SharePoint Elevation of Privilege Vulnerability'.
- risk 0.57cvss 8.8epss 0.03
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted authentication request to an affected SharePoint server, aka 'Microsoft SharePoint Server Elevation of Privilege Vulnerability'.
- risk 0.57cvss 8.8epss 0.02
A spoofing vulnerability exists in Microsoft SharePoint when it improperly handles requests to authorize applications, resulting in cross-site request forgery (CSRF).To exploit this vulnerability, an attacker would need to create a page specifically designed to cause a…
- risk 0.57cvss 8.8epss 0.01
A spoofing vulnerability exists in Microsoft SharePoint when it improperly handles requests to authorize applications, resulting in cross-site request forgery (CSRF).To exploit this vulnerability, an attacker would need to create a page specifically designed to cause a…
- risk 0.57cvss 8.8epss 0.03
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0957.
- risk 0.57cvss 8.8epss 0.03
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0958.
- risk 0.57cvss 8.8epss 0.02
Microsoft Project Server and Microsoft SharePoint Enterprise Server 2016 allow an attacker to use cross-site forgery to read content that they are not authorized to read, use the victim's identity to take actions on the web application on behalf of the victim, such as change…
- risk 0.56cvss 6.5epss 0.23
Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
- risk 0.56cvss 8.1epss 0.06
Microsoft SharePoint Server Spoofing Vulnerability
- risk 0.56cvss 8.1epss 0.48
Microsoft SharePoint Server Remote Code Execution Vulnerability
- risk 0.56cvss 8.6epss 0.01
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SharePoint application…
- risk 0.56cvss 8.6epss 0.04
A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net web controls. An authenticated attacker who successfully exploited the vulnerability could use a specially crafted page to perform actions…
- risk 0.56cvss 8.6epss 0.02
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SharePoint application…
Page 8 of 34