Sharepoint Foundation
by Microsoft
CVEs (231)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2022-41062 | Hig | 0.57 | 8.8 | 0.02 | Nov 9, 2022 | Microsoft SharePoint Server Remote Code Execution Vulnerability | ||
| CVE-2022-41038 | Hig | 0.57 | 8.8 | 0.03 | Oct 11, 2022 | Microsoft SharePoint Server Remote Code Execution Vulnerability | ||
| CVE-2022-41037 | Hig | 0.57 | 8.8 | 0.02 | Oct 11, 2022 | Microsoft SharePoint Server Remote Code Execution Vulnerability | ||
| CVE-2022-41036 | Hig | 0.57 | 8.8 | 0.02 | Oct 11, 2022 | Microsoft SharePoint Server Remote Code Execution Vulnerability | ||
| CVE-2022-38009 | Hig | 0.57 | 8.8 | 0.02 | Sep 13, 2022 | Microsoft SharePoint Server Remote Code Execution Vulnerability | ||
| CVE-2022-38008 | Hig | 0.57 | 8.8 | 0.02 | Sep 13, 2022 | Microsoft SharePoint Server Remote Code Execution Vulnerability | ||
| CVE-2022-30158 | Hig | 0.57 | 8.8 | 0.03 | Jun 15, 2022 | Microsoft SharePoint Server Remote Code Execution Vulnerability | ||
| CVE-2021-42309 | Hig | 0.57 | 8.8 | 0.03 | Dec 15, 2021 | Microsoft SharePoint Server Remote Code Execution Vulnerability | ||
| CVE-2021-24072 | Hig | 0.57 | 8.8 | 0.02 | Feb 25, 2021 | Microsoft SharePoint Server Remote Code Execution Vulnerability | ||
| CVE-2021-1707 | Hig | 0.57 | 8.8 | 0.04 | Jan 12, 2021 | Microsoft SharePoint Server Remote Code Execution Vulnerability | ||
| CVE-2020-17121 | Hig | 0.57 | 8.8 | 0.03 | Dec 10, 2020 | Microsoft SharePoint Remote Code Execution Vulnerability | ||
| CVE-2020-16946 | Hig | 0.57 | 8.7 | 0.02 | Oct 16, 2020 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to… | ||
| CVE-2020-16945 | Hig | 0.57 | 8.7 | 0.02 | Oct 16, 2020 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to… | ||
| CVE-2020-16944 | Hig | 0.57 | 8.7 | 0.02 | Oct 16, 2020 | This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server. An authenticated attacker could exploit this vulnerability by sending a specially crafted request to an affected SharePoint… | ||
| CVE-2019-1261 | Hig | 0.57 | 8.8 | 0.02 | Sep 11, 2019 | A spoofing vulnerability exists in Microsoft SharePoint when it improperly handles requests to authorize applications, resulting in cross-site request forgery (CSRF).To exploit this vulnerability, an attacker would need to create a page specifically designed to cause a… | ||
| CVE-2019-1259 | Hig | 0.57 | 8.8 | 0.01 | Sep 11, 2019 | A spoofing vulnerability exists in Microsoft SharePoint when it improperly handles requests to authorize applications, resulting in cross-site request forgery (CSRF).To exploit this vulnerability, an attacker would need to create a page specifically designed to cause a… | ||
| CVE-2019-0958 | Hig | 0.57 | 8.8 | 0.03 | May 16, 2019 | An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0957. | ||
| CVE-2023-28288 | Hig | 0.56 | 8.1 | 0.06 | Apr 11, 2023 | Microsoft SharePoint Server Spoofing Vulnerability | ||
| CVE-2021-40487 | Hig | 0.56 | 8.1 | 0.48 | Oct 13, 2021 | Microsoft SharePoint Server Remote Code Execution Vulnerability | ||
| CVE-2020-16951 | Hig | 0.56 | 8.6 | 0.01 | Oct 16, 2020 | A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SharePoint application… |
- risk 0.57cvss 8.8epss 0.02
Microsoft SharePoint Server Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.03
Microsoft SharePoint Server Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.02
Microsoft SharePoint Server Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.02
Microsoft SharePoint Server Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.02
Microsoft SharePoint Server Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.02
Microsoft SharePoint Server Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.03
Microsoft SharePoint Server Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.03
Microsoft SharePoint Server Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.02
Microsoft SharePoint Server Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.04
Microsoft SharePoint Server Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.03
Microsoft SharePoint Remote Code Execution Vulnerability
- risk 0.57cvss 8.7epss 0.02
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to…
- risk 0.57cvss 8.7epss 0.02
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to…
- risk 0.57cvss 8.7epss 0.02
This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server. An authenticated attacker could exploit this vulnerability by sending a specially crafted request to an affected SharePoint…
- risk 0.57cvss 8.8epss 0.02
A spoofing vulnerability exists in Microsoft SharePoint when it improperly handles requests to authorize applications, resulting in cross-site request forgery (CSRF).To exploit this vulnerability, an attacker would need to create a page specifically designed to cause a…
- risk 0.57cvss 8.8epss 0.01
A spoofing vulnerability exists in Microsoft SharePoint when it improperly handles requests to authorize applications, resulting in cross-site request forgery (CSRF).To exploit this vulnerability, an attacker would need to create a page specifically designed to cause a…
- risk 0.57cvss 8.8epss 0.03
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0957.
- risk 0.56cvss 8.1epss 0.06
Microsoft SharePoint Server Spoofing Vulnerability
- risk 0.56cvss 8.1epss 0.48
Microsoft SharePoint Server Remote Code Execution Vulnerability
- risk 0.56cvss 8.6epss 0.01
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SharePoint application…
Page 3 of 12