Office SharePoint

CVEs (249)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2018-1032	Microsoft Sharepoint Server	Med	0.35	5.4	0.02	Apr 12, 2018	An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint Server,…
CVE-2018-1014	Microsoft Sharepoint Server	Med	0.35	5.4	0.02	Apr 12, 2018	An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint. This…
CVE-2018-1005	Microsoft Sharepoint Server	Med	0.35	5.4	0.02	Apr 12, 2018	An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint. This…
CVE-2026-20945	Microsoft Office SharePoint	Med	0.32	4.6	0.19	Apr 14, 2026	Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-69690	Microsoft Office SharePoint	Med	0.30	4.6	0.00	Sep 8, 2026	Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-64922	Microsoft Office SharePoint	Med	0.30	4.6	0.01	Aug 11, 2026	Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-64916	Microsoft Office SharePoint	Med	0.30	4.6	0.01	Aug 11, 2026	Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-64902	Microsoft Office SharePoint	Med	0.30	4.6	0.01	Aug 11, 2026	Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-64897	Microsoft Office SharePoint	Med	0.30	4.6	0.01	Aug 11, 2026	Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-62917	Microsoft Office SharePoint	Med	0.30	4.6	0.01	Aug 11, 2026	Improper input validation in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-62829	Microsoft Office SharePoint	Med	0.30	4.6	0.00	Aug 11, 2026	Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-47641	Microsoft Office SharePoint	Med	0.30	4.6	0.01	Jun 9, 2026	Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-47640	Microsoft Office SharePoint	Med	0.30	4.6	0.01	Jun 9, 2026	Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-47638	Microsoft Office SharePoint	Med	0.30	4.6	0.01	Jun 9, 2026	Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-47637	Microsoft Office SharePoint	Med	0.30	4.6	0.01	Jun 9, 2026	Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-45479	Microsoft Office SharePoint	Med	0.30	4.6	0.01	Jun 9, 2026	Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-45468	Microsoft Office SharePoint	Med	0.30	4.6	0.01	Jun 9, 2026	Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-45467	Microsoft Office SharePoint	Med	0.30	4.6	0.01	Jun 9, 2026	Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-45462	Microsoft Office SharePoint	Med	0.30	4.6	0.01	Jun 9, 2026	Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-20959	Microsoft Office SharePoint	Med	0.30	4.6	0.08	Jan 13, 2026	Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

CVE-2018-1032MedApr 12, 2018
Microsoft
Sharepoint Server
risk 0.35cvss 5.4epss 0.02
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint Server,…
CVE-2018-1014MedApr 12, 2018
Microsoft
Sharepoint Server
risk 0.35cvss 5.4epss 0.02
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint. This…
CVE-2018-1005MedApr 12, 2018
Microsoft
Sharepoint Server
risk 0.35cvss 5.4epss 0.02
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint. This…
CVE-2026-20945MedApr 14, 2026
Microsoft
Office SharePoint
risk 0.32cvss 4.6epss 0.19
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-69690MedSep 8, 2026
Microsoft
Office SharePoint
risk 0.30cvss 4.6epss 0.00
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-64922MedAug 11, 2026
Microsoft
Office SharePoint
risk 0.30cvss 4.6epss 0.01
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-64916MedAug 11, 2026
Microsoft
Office SharePoint
risk 0.30cvss 4.6epss 0.01
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-64902MedAug 11, 2026
Microsoft
Office SharePoint
risk 0.30cvss 4.6epss 0.01
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-64897MedAug 11, 2026
Microsoft
Office SharePoint
risk 0.30cvss 4.6epss 0.01
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-62917MedAug 11, 2026
Microsoft
Office SharePoint
risk 0.30cvss 4.6epss 0.01
Improper input validation in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-62829MedAug 11, 2026
Microsoft
Office SharePoint
risk 0.30cvss 4.6epss 0.00
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-47641MedJun 9, 2026
Microsoft
Office SharePoint
risk 0.30cvss 4.6epss 0.01
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-47640MedJun 9, 2026
Microsoft
Office SharePoint
risk 0.30cvss 4.6epss 0.01
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-47638MedJun 9, 2026
Microsoft
Office SharePoint
risk 0.30cvss 4.6epss 0.01
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-47637MedJun 9, 2026
Microsoft
Office SharePoint
risk 0.30cvss 4.6epss 0.01
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-45479MedJun 9, 2026
Microsoft
Office SharePoint
risk 0.30cvss 4.6epss 0.01
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-45468MedJun 9, 2026
Microsoft
Office SharePoint
risk 0.30cvss 4.6epss 0.01
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-45467MedJun 9, 2026
Microsoft
Office SharePoint
risk 0.30cvss 4.6epss 0.01
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-45462MedJun 9, 2026
Microsoft
Office SharePoint
risk 0.30cvss 4.6epss 0.01
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-20959MedJan 13, 2026
Microsoft
Office SharePoint
risk 0.30cvss 4.6epss 0.08
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Page 12 of 13