Sharepoint Services (Microsoft) - vulnerabilities (CVEs)

19 CVEs, 0 in the last 30 days, 9 known versions, newest CVE from 2015-03-11. Vendor: Microsoft.

CVEs of Sharepoint Services

CVE-2015-0085 - CVSS 9.3 (critical), 2015-03-11: Use-after-free vulnerability in Microsoft Office 2007 SP3, Excel 2007 SP3, PowerPoint 2007 SP3, Word 2007 SP3, Office 2010 SP2, Excel 2010 SP2, PowerPoint…
CVE-2014-0251 - CVSS 9 (critical), 2014-05-14: Microsoft Windows SharePoint Services 3.0 SP3; SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013 Gold and SP1; SharePoint Foundation 2010 SP1 and SP2 and…
CVE-2013-1330 - CVSS 10 (critical), 2013-09-11: The default configuration of Microsoft SharePoint Portal Server 2003 SP3, SharePoint Server 2007 SP3 and 2010 SP1 and SP2, and Office Web Apps 2010 does not…
CVE-2013-1315 - CVSS 9.3 (critical), 2013-09-11: Microsoft SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013; Office Web Apps 2010; Excel 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Office…
CVE-2013-3847 - CVSS 9.3 (critical), 2013-09-11: Microsoft Word Automation Services in SharePoint Server 2010 SP1, Word Web App 2010 SP1 in Office Web Apps 2010, Word 2003 SP3, Word 2007 SP3, Word 2010 SP1,…
CVE-2013-3179 - CVSS 4.3 (medium), 2013-09-11: Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013 allows remote attackers to inject arbitrary web…
CVE-2013-0081 - CVSS 5 (medium), 2013-09-11: Microsoft SharePoint Portal Server 2003 SP3 and SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013 do not properly process unassigned workflows, which…
CVE-2012-2520 - CVSS 4.3 (medium), 2012-10-09: Cross-site scripting (XSS) vulnerability in Microsoft InfoPath 2007 SP2 and SP3 and 2010 SP1, Communicator 2007 R2, Lync 2010 and 2010 Attendee, SharePoint…
CVE-2012-1863 - CVSS 4.3 (medium), 2012-07-10: Cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint Server 2007 SP2 and SP3 Windows SharePoint Services 3.0 SP2, and SharePoint Foundation…
CVE-2011-1892 - CVSS 4 (medium), 2011-09-15: Microsoft Office Groove 2007 SP2, SharePoint Workspace 2010 Gold and SP1, Office Forms Server 2007 SP2, Office SharePoint Server 2007 SP2, Office SharePoint…
CVE-2011-1891 - CVSS 4.3 (medium), 2011-09-15: Cross-site scripting (XSS) vulnerability in Microsoft Windows SharePoint Services 3.0 SP2, and SharePoint Foundation 2010 Gold and SP1, allows remote…
CVE-2011-1893 - CVSS 4.3 (medium), 2011-09-15: Cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint Server 2010, Windows SharePoint Services 2.0 and 3.0 SP2, and SharePoint Foundation…
CVE-2010-3243 - CVSS 4.3 (medium), 2010-10-13: Cross-site scripting (XSS) vulnerability in the toStaticHTML function in Microsoft Internet Explorer 8, and the SafeHTML function in Microsoft Windows…
CVE-2010-3324 - CVSS 4.3 (medium), 2010-09-17: The toStaticHTML function in Microsoft Internet Explorer 8, and the SafeHTML function in Microsoft Windows SharePoint Services 3.0 SP2, SharePoint Foundation…
CVE-2010-1264 - CVSS 4 (medium), 2010-06-08: Unspecified vulnerability in Microsoft Windows SharePoint Services 3.0 SP1 and SP2 allows remote attackers to cause a denial of service (hang) via crafted…
CVE-2010-1257 - CVSS 4.3 (medium), 2010-06-08: Cross-site scripting (XSS) vulnerability in the toStaticHTML API, as used in Microsoft Office InfoPath 2003 SP3, 2007 SP1, and 2007 SP2; Office SharePoint…
CVE-2010-0817 - CVSS 4.3 (medium), 2010-04-29: Cross-site scripting (XSS) vulnerability in _layouts/help.aspx in Microsoft SharePoint Server 2007 12.0.0.6421 and possibly earlier, and SharePoint Services…
CVE-2007-2581 - CVSS 4.3 (medium), 2007-05-09: Multiple cross-site scripting (XSS) vulnerabilities in Microsoft Windows SharePoint Services 3.0 for Windows Server 2003 and Office SharePoint Server 2007…
CVE-2003-0904 - CVSS 6 (medium), 2004-01-20: Microsoft Exchange 2003 and Outlook Web Access (OWA), when configured to use NTLM authentication, does not properly reuse HTTP connections, which can cause…