Sharepoint Foundation
by Microsoft
CVEs (231)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2016-0136 | Hig | 0.52 | 7.8 | 0.21 | Apr 12, 2016 | Microsoft Excel 2007 SP3, Excel 2010 SP2, Office Compatibility Pack SP3, Excel Services on SharePoint Server 2007 SP3, and Excel Services on SharePoint Server 2010 SP2 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory… | ||
| CVE-2016-0054 | Hig | 0.52 | 7.8 | 0.16 | Feb 10, 2016 | Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, Office Compatibility Pack SP3, Excel Viewer, Excel Services on SharePoint Server 2007 SP3, Excel Services on SharePoint Server 2010 SP2, Excel… | ||
| CVE-2021-40484 | Hig | 0.50 | 7.6 | 0.01 | Oct 13, 2021 | Microsoft SharePoint Server Spoofing Vulnerability | ||
| CVE-2021-31964 | Hig | 0.50 | 7.6 | 0.02 | Jun 8, 2021 | Microsoft SharePoint Server Spoofing Vulnerability | ||
| CVE-2021-31948 | Hig | 0.50 | 7.6 | 0.01 | Jun 8, 2021 | Microsoft SharePoint Server Spoofing Vulnerability | ||
| CVE-2021-28478 | Hig | 0.50 | 7.6 | 0.02 | May 11, 2021 | Microsoft SharePoint Server Spoofing Vulnerability | ||
| CVE-2021-43242 | Hig | 0.49 | 7.6 | 0.01 | Dec 15, 2021 | Microsoft SharePoint Server Spoofing Vulnerability | ||
| CVE-2021-38652 | Hig | 0.49 | 7.6 | 0.01 | Sep 15, 2021 | Microsoft SharePoint Server Spoofing Vulnerability | ||
| CVE-2021-38651 | Hig | 0.49 | 7.6 | 0.01 | Sep 15, 2021 | Microsoft SharePoint Server Spoofing Vulnerability | ||
| CVE-2019-1006 | Hig | 0.49 | 7.5 | 0.06 | Jul 15, 2019 | An authentication bypass vulnerability exists in Windows Communication Foundation (WCF) and Windows Identity Foundation (WIF), allowing signing of SAML tokens with arbitrary symmetric keys, aka 'WCF/WIF SAML Token Authentication Bypass Vulnerability'. | ||
| CVE-2020-1345 | Hig | 0.48 | 7.4 | 0.03 | Sep 11, 2020 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to… | ||
| CVE-2020-1198 | Hig | 0.48 | 7.4 | 0.03 | Sep 11, 2020 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to… | ||
| CVE-2021-42294 | Hig | 0.47 | 7.2 | 0.02 | Dec 15, 2021 | Microsoft SharePoint Server Remote Code Execution Vulnerability | ||
| CVE-2021-34467 | Hig | 0.47 | 7.1 | 0.07 | Jul 16, 2021 | Microsoft SharePoint Server Remote Code Execution Vulnerability | ||
| CVE-2021-31966 | Hig | 0.47 | 7.2 | 0.05 | Jun 8, 2021 | Microsoft SharePoint Server Remote Code Execution Vulnerability | ||
| CVE-2021-34468 | Hig | 0.46 | 7.1 | 0.02 | Jul 14, 2021 | Microsoft SharePoint Server Remote Code Execution Vulnerability | ||
| CVE-2021-31963 | Hig | 0.46 | 7.1 | 0.02 | Jun 8, 2021 | Microsoft SharePoint Server Remote Code Execution Vulnerability | ||
| CVE-2021-26420 | Hig | 0.46 | 7.1 | 0.03 | Jun 8, 2021 | Microsoft SharePoint Server Remote Code Execution Vulnerability | ||
| CVE-2021-31172 | Hig | 0.46 | 7.1 | 0.02 | May 11, 2021 | Microsoft SharePoint Server Spoofing Vulnerability | ||
| CVE-2020-17089 | Hig | 0.46 | 7.1 | 0.03 | Dec 10, 2020 | Microsoft SharePoint Elevation of Privilege Vulnerability |
- risk 0.52cvss 7.8epss 0.21
Microsoft Excel 2007 SP3, Excel 2010 SP2, Office Compatibility Pack SP3, Excel Services on SharePoint Server 2007 SP3, and Excel Services on SharePoint Server 2010 SP2 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory…
- risk 0.52cvss 7.8epss 0.16
Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, Office Compatibility Pack SP3, Excel Viewer, Excel Services on SharePoint Server 2007 SP3, Excel Services on SharePoint Server 2010 SP2, Excel…
- risk 0.50cvss 7.6epss 0.01
Microsoft SharePoint Server Spoofing Vulnerability
- risk 0.50cvss 7.6epss 0.02
Microsoft SharePoint Server Spoofing Vulnerability
- risk 0.50cvss 7.6epss 0.01
Microsoft SharePoint Server Spoofing Vulnerability
- risk 0.50cvss 7.6epss 0.02
Microsoft SharePoint Server Spoofing Vulnerability
- risk 0.49cvss 7.6epss 0.01
Microsoft SharePoint Server Spoofing Vulnerability
- risk 0.49cvss 7.6epss 0.01
Microsoft SharePoint Server Spoofing Vulnerability
- risk 0.49cvss 7.6epss 0.01
Microsoft SharePoint Server Spoofing Vulnerability
- risk 0.49cvss 7.5epss 0.06
An authentication bypass vulnerability exists in Windows Communication Foundation (WCF) and Windows Identity Foundation (WIF), allowing signing of SAML tokens with arbitrary symmetric keys, aka 'WCF/WIF SAML Token Authentication Bypass Vulnerability'.
- risk 0.48cvss 7.4epss 0.03
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to…
- risk 0.48cvss 7.4epss 0.03
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to…
- risk 0.47cvss 7.2epss 0.02
Microsoft SharePoint Server Remote Code Execution Vulnerability
- risk 0.47cvss 7.1epss 0.07
Microsoft SharePoint Server Remote Code Execution Vulnerability
- risk 0.47cvss 7.2epss 0.05
Microsoft SharePoint Server Remote Code Execution Vulnerability
- risk 0.46cvss 7.1epss 0.02
Microsoft SharePoint Server Remote Code Execution Vulnerability
- risk 0.46cvss 7.1epss 0.02
Microsoft SharePoint Server Remote Code Execution Vulnerability
- risk 0.46cvss 7.1epss 0.03
Microsoft SharePoint Server Remote Code Execution Vulnerability
- risk 0.46cvss 7.1epss 0.02
Microsoft SharePoint Server Spoofing Vulnerability
- risk 0.46cvss 7.1epss 0.03
Microsoft SharePoint Elevation of Privilege Vulnerability
Page 5 of 12