Microsoft Sharepoint Server (Microsoft) - vulnerabilities (CVEs)

84 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2020-07-14. Vendor: Microsoft.

CVEs of Microsoft Sharepoint Server

CVE-2020-1451 - CVSS 5.4 (medium), 2020-07-14: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
CVE-2020-1450 - CVSS 5.4 (medium), 2020-07-14: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
CVE-2020-1456 - CVSS 5.4 (medium), 2020-07-14: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
CVE-2020-1448 - CVSS 8.8 (high), 2020-07-14: A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code…
CVE-2020-1454 - CVSS 5.4 (medium), 2020-07-14: This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server.An authenticated…
CVE-2020-1447 - CVSS 8.8 (high), 2020-07-14: A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code…
CVE-2020-1443 - CVSS 5.4 (medium), 2020-07-14: A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server,…
CVE-2020-1446 - CVSS 8.8 (high), 2020-07-14: A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code…
CVE-2020-1439 - CVSS 8.8 (high), 2020-07-14: A remote code execution vulnerability exists in PerformancePoint Services for SharePoint Server when the software fails to check the source markup of XML file…
CVE-2020-1445 - CVSS 5.5 (medium), 2020-07-14: An information disclosure vulnerability exists when Microsoft Office improperly discloses the contents of its memory, aka 'Microsoft Office Information…
CVE-2020-1444 - CVSS 4.3 (medium), 2020-07-14: A remote code execution vulnerability exists in the way Microsoft SharePoint software parses specially crafted email messages, aka 'Microsoft SharePoint…
CVE-2020-1147 - CVSS 7.8 (high), 2020-07-14: A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of…
CVE-2020-1342 - CVSS 5.5 (medium), 2020-07-14: An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose…
CVE-2020-1318 - CVSS 5.4 (medium), 2020-06-09: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
CVE-2020-1323 - CVSS 6.1 (medium), 2020-06-09: An open redirect vulnerability exists in Microsoft SharePoint that could lead to spoofing.To exploit the vulnerability, an attacker could send a link that has…
CVE-2020-1320 - CVSS 5.4 (medium), 2020-06-09: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
CVE-2020-1295 - CVSS 8.8 (high), 2020-06-09: An elevation of privilege vulnerability exists in Microsoft SharePoint, aka 'Microsoft SharePoint Elevation of Privilege Vulnerability'.
CVE-2020-1298 - CVSS 5.4 (medium), 2020-06-09: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
CVE-2020-1297 - CVSS 5.4 (medium), 2020-06-09: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
CVE-2020-1183 - CVSS 5.4 (medium), 2020-06-09: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
CVE-2020-1181 - CVSS 8.8 (high), 2020-06-09: A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net web controls, aka…
CVE-2020-1178 - CVSS 8.8 (high), 2020-06-09: An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted authentication request to an…
CVE-2020-1177 - CVSS 5.4 (medium), 2020-06-09: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
CVE-2020-1148 - CVSS 5.4 (medium), 2020-06-09: A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server,…
CVE-2020-0971 - CVSS 8.8 (high), 2020-04-15: A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka…
CVE-2020-0974 - CVSS 8.8 (high), 2020-04-15: A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka…
CVE-2020-0978 - CVSS 5.4 (medium), 2020-04-15: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
CVE-2020-0973 - CVSS 5.4 (medium), 2020-04-15: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
CVE-2020-0977 - CVSS 5.4 (medium), 2020-04-15: A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server,…
CVE-2020-0972 - CVSS 5.4 (medium), 2020-04-15: A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server,…
CVE-2020-0975 - CVSS 5.4 (medium), 2020-04-15: A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server,…
CVE-2020-0980 - CVSS 7.8 (high), 2020-04-15: A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code…
CVE-2020-0954 - CVSS 5.4 (medium), 2020-04-15: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
CVE-2020-0929 - CVSS 8.8 (high), 2020-04-15: A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka…
CVE-2020-0932 - CVSS 8.8 (high), 2020-04-15: A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka…
CVE-2020-0927 - CVSS 5.4 (medium), 2020-04-15: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
CVE-2020-0931 - CVSS 8.8 (high), 2020-04-15: A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka…
CVE-2020-0930 - CVSS 5.4 (medium), 2020-04-15: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
CVE-2020-0933 - CVSS 5.4 (medium), 2020-04-15: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
CVE-2020-0924 - CVSS 5.4 (medium), 2020-04-15: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
CVE-2020-0923 - CVSS 5.4 (medium), 2020-04-15: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
CVE-2020-0926 - CVSS 5.4 (medium), 2020-04-15: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
CVE-2020-0920 - CVSS 8.8 (high), 2020-04-15: A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka…
CVE-2020-0925 - CVSS 5.4 (medium), 2020-04-15: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
CVE-2020-0891 - CVSS 5.4 (medium), 2020-03-12: This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server.An authenticated…
CVE-2020-0894 - CVSS 5.4 (medium), 2020-03-12: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
CVE-2020-0893 - CVSS 5.4 (medium), 2020-03-12: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
CVE-2020-0892 - CVSS 7.8 (high), 2020-03-12: A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code…
CVE-2020-0852 - CVSS 7.8 (high), 2020-03-12: A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code…
CVE-2020-0850 - CVSS 8.8 (high), 2020-03-12: A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code…
CVE-2020-0694 - CVSS 5.4 (medium), 2020-02-11: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
CVE-2020-0693 - CVSS 5.4 (medium), 2020-02-11: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
CVE-2019-1442 - CVSS 5.5 (medium), 2019-11-12: A security feature bypass vulnerability exists when Microsoft Office does not validate URLs.An attacker could send a victim a specially crafted file, which…
CVE-2019-1443 - CVSS 6.5 (medium), 2019-11-12: An information disclosure vulnerability exists in Microsoft SharePoint when an attacker uploads a specially crafted file to the SharePoint Server.An…
CVE-2019-1330 - CVSS 6.5 (medium), 2019-10-10: An elevation of privilege vulnerability exists in Microsoft SharePoint, aka 'Microsoft SharePoint Elevation of Privilege Vulnerability'. This CVE ID is unique…
CVE-2019-1296 - CVSS 8.8 (high), 2019-09-11: A remote code execution vulnerability exists in Microsoft SharePoint where APIs aren't properly protected from unsafe data input, aka 'Microsoft SharePoint…
CVE-2019-1295 - CVSS 8.8 (high), 2019-09-11: A remote code execution vulnerability exists in Microsoft SharePoint where APIs aren't properly protected from unsafe data input, aka 'Microsoft SharePoint…
CVE-2019-1261 - CVSS 8.8 (high), 2019-09-11: A spoofing vulnerability exists in Microsoft SharePoint when it improperly handles requests to authorize applications, resulting in cross-site request forgery…
CVE-2019-1260 - CVSS 6.5 (medium), 2019-09-11: An elevation of privilege vulnerability exists in Microsoft SharePoint, aka 'Microsoft SharePoint Elevation of Privilege Vulnerability'.
CVE-2019-1257 - CVSS 8.8 (high), 2019-09-11: A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka…
CVE-2019-1134 - CVSS 5.4 (medium), 2019-07-15: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
CVE-2019-1006 - CVSS 7.5 (high), 2019-07-15: An authentication bypass vulnerability exists in Windows Communication Foundation (WCF) and Windows Identity Foundation (WIF), allowing signing of SAML tokens…
CVE-2019-0957 - CVSS 8.8 (high), 2019-05-16: An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
CVE-2019-0958 - CVSS 8.8 (high), 2019-05-16: An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
CVE-2019-0831 - CVSS 5.4 (medium), 2019-04-09: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
CVE-2019-0830 - CVSS 5.4 (medium), 2019-04-09: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
CVE-2019-0604 - CVSS 9.8 (critical), 2019-03-05: A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka…
CVE-2019-0594 - CVSS 8.8 (high), 2019-03-05: A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka…
CVE-2019-0585 - CVSS 8.8 (high), 2019-01-08: A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft Word Remote Code…
CVE-2019-0562 - CVSS 5.4 (medium), 2019-01-08: An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
CVE-2019-0558 - CVSS 5.4 (medium), 2019-01-08: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
CVE-2018-8635 - CVSS 8.8 (high), 2018-12-12: An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted authentication request to an…
CVE-2018-8628 - CVSS 7.8 (high), 2018-12-12: A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in memory, aka "Microsoft…
CVE-2018-8572 - CVSS 5.4 (medium), 2018-11-14: An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
CVE-2018-8568 - CVSS 5.4 (medium), 2018-11-14: An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
CVE-2018-8539 - CVSS 7.8 (high), 2018-11-14: A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft Word Remote Code…
CVE-2018-8504 - CVSS 8.8 (high), 2018-10-10: A remote code execution vulnerability exists in Microsoft Word software when the software fails to properly handle objects in Protected View, aka "Microsoft…
CVE-2018-8431 - CVSS 5.4 (medium), 2018-09-13: An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
CVE-2018-8426 - CVSS 5.4 (medium), 2018-09-13: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
CVE-2018-8378 - CVSS 5.5 (medium), 2018-08-15: An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose…
CVE-2018-8168 - CVSS 5.4 (medium), 2018-05-09: An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
CVE-2018-8149 - CVSS 5.4 (medium), 2018-05-09: An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
CVE-2018-1032 - CVSS 5.4 (medium), 2018-04-12: An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
CVE-2018-1028 - CVSS 8.8 (high), 2018-04-12: A remote code execution vulnerability exists when the Office graphics component improperly handles specially crafted embedded fonts, aka "Microsoft Office…