Microsoft Sharepoint Foundation (Microsoft) - vulnerabilities (CVEs)

56 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2020-07-14. Vendor: Microsoft.

CVEs of Microsoft Sharepoint Foundation

CVE-2020-1443 - CVSS 5.4 (medium), 2020-07-14: A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server,…
CVE-2020-1439 - CVSS 8.8 (high), 2020-07-14: A remote code execution vulnerability exists in PerformancePoint Services for SharePoint Server when the software fails to check the source markup of XML file…
CVE-2020-1444 - CVSS 4.3 (medium), 2020-07-14: A remote code execution vulnerability exists in the way Microsoft SharePoint software parses specially crafted email messages, aka 'Microsoft SharePoint…
CVE-2020-1320 - CVSS 5.4 (medium), 2020-06-09: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
CVE-2020-1318 - CVSS 5.4 (medium), 2020-06-09: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
CVE-2020-1323 - CVSS 6.1 (medium), 2020-06-09: An open redirect vulnerability exists in Microsoft SharePoint that could lead to spoofing.To exploit the vulnerability, an attacker could send a link that has…
CVE-2020-1297 - CVSS 5.4 (medium), 2020-06-09: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
CVE-2020-1298 - CVSS 5.4 (medium), 2020-06-09: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
CVE-2020-1289 - CVSS 5.4 (medium), 2020-06-09: A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server,…
CVE-2020-1181 - CVSS 8.8 (high), 2020-06-09: A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net web controls, aka…
CVE-2020-1183 - CVSS 5.4 (medium), 2020-06-09: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
CVE-2020-1177 - CVSS 5.4 (medium), 2020-06-09: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
CVE-2020-0976 - CVSS 5.4 (medium), 2020-04-15: A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server,…
CVE-2020-0975 - CVSS 5.4 (medium), 2020-04-15: A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server,…
CVE-2020-0972 - CVSS 5.4 (medium), 2020-04-15: A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server,…
CVE-2020-0978 - CVSS 5.4 (medium), 2020-04-15: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
CVE-2020-0971 - CVSS 8.8 (high), 2020-04-15: A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka…
CVE-2020-0929 - CVSS 8.8 (high), 2020-04-15: A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka…
CVE-2020-0933 - CVSS 5.4 (medium), 2020-04-15: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
CVE-2020-0932 - CVSS 8.8 (high), 2020-04-15: A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka…
CVE-2020-0931 - CVSS 8.8 (high), 2020-04-15: A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka…
CVE-2020-0923 - CVSS 5.4 (medium), 2020-04-15: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
CVE-2020-0920 - CVSS 8.8 (high), 2020-04-15: A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka…
CVE-2020-0925 - CVSS 5.4 (medium), 2020-04-15: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
CVE-2020-0924 - CVSS 5.4 (medium), 2020-04-15: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
CVE-2020-0892 - CVSS 7.8 (high), 2020-03-12: A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code…
CVE-2020-0891 - CVSS 5.4 (medium), 2020-03-12: This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server.An authenticated…
CVE-2020-0894 - CVSS 5.4 (medium), 2020-03-12: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
CVE-2020-0850 - CVSS 8.8 (high), 2020-03-12: A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code…
CVE-2020-0795 - CVSS 5.4 (medium), 2020-03-12: This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server.An authenticated…
CVE-2019-1443 - CVSS 6.5 (medium), 2019-11-12: An information disclosure vulnerability exists in Microsoft SharePoint when an attacker uploads a specially crafted file to the SharePoint Server.An…
CVE-2019-1328 - CVSS 5.4 (medium), 2019-10-10: A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server,…
CVE-2019-1330 - CVSS 6.5 (medium), 2019-10-10: An elevation of privilege vulnerability exists in Microsoft SharePoint, aka 'Microsoft SharePoint Elevation of Privilege Vulnerability'. This CVE ID is unique…
CVE-2019-1329 - CVSS 5.4 (medium), 2019-10-10: An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
CVE-2019-1070 - CVSS 5.4 (medium), 2019-10-10: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
CVE-2019-1295 - CVSS 8.8 (high), 2019-09-11: A remote code execution vulnerability exists in Microsoft SharePoint where APIs aren't properly protected from unsafe data input, aka 'Microsoft SharePoint…
CVE-2019-1296 - CVSS 8.8 (high), 2019-09-11: A remote code execution vulnerability exists in Microsoft SharePoint where APIs aren't properly protected from unsafe data input, aka 'Microsoft SharePoint…
CVE-2019-1260 - CVSS 6.5 (medium), 2019-09-11: An elevation of privilege vulnerability exists in Microsoft SharePoint, aka 'Microsoft SharePoint Elevation of Privilege Vulnerability'.
CVE-2019-1259 - CVSS 8.8 (high), 2019-09-11: A spoofing vulnerability exists in Microsoft SharePoint when it improperly handles requests to authorize applications, resulting in cross-site request forgery…
CVE-2019-1262 - CVSS 5.4 (medium), 2019-09-11: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
CVE-2019-1257 - CVSS 8.8 (high), 2019-09-11: A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka…
CVE-2019-1261 - CVSS 8.8 (high), 2019-09-11: A spoofing vulnerability exists in Microsoft SharePoint when it improperly handles requests to authorize applications, resulting in cross-site request forgery…
CVE-2019-1006 - CVSS 7.5 (high), 2019-07-15: An authentication bypass vulnerability exists in Windows Communication Foundation (WCF) and Windows Identity Foundation (WIF), allowing signing of SAML tokens…
CVE-2019-0956 - CVSS 6.5 (medium), 2019-05-16: An information disclosure vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
CVE-2019-0949 - CVSS 5.7 (medium), 2019-05-16: A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server,…
CVE-2019-0952 - CVSS 8.8 (high), 2019-05-16: A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net web controls, aka…
CVE-2019-0963 - CVSS 5.4 (medium), 2019-05-16: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
CVE-2019-0951 - CVSS 5.4 (medium), 2019-05-16: A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server,…
CVE-2019-0958 - CVSS 8.8 (high), 2019-05-16: An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
CVE-2019-0950 - CVSS 5.7 (medium), 2019-05-16: A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server,…
CVE-2019-0831 - CVSS 5.4 (medium), 2019-04-09: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
CVE-2019-0830 - CVSS 5.4 (medium), 2019-04-09: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
CVE-2019-0778 - CVSS 5.4 (medium), 2019-04-09: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
CVE-2019-0670 - CVSS 6.1 (medium), 2019-03-05: A spoofing vulnerability exists in Microsoft SharePoint when the application does not properly parse HTTP content, aka 'Microsoft SharePoint Spoofing…
CVE-2019-0594 - CVSS 8.8 (high), 2019-03-05: A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka…
CVE-2019-0604 - CVSS 9.8 (critical), 2019-03-05: A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka…