Microsoft Sharepoint Enterprise Server vulnerabilities
44 known vulnerabilities affecting microsoft/microsoft_sharepoint_enterprise_server.
Total CVEs
44
CISA KEV
1
actively exploited
Public exploits
1
Exploited in wild
1
Severity breakdown
HIGH18MEDIUM26
Vulnerabilities
Page 2 of 3
CVE-2019-1260P3MEDIUMCVSS 6.5v20162019-09-11
CVE-2019-1260 [MEDIUM] CVE-2019-1260: An elevation of privilege vulnerability exists in Microsoft SharePoint, aka 'Microsoft SharePoint El
An elevation of privilege vulnerability exists in Microsoft SharePoint, aka 'Microsoft SharePoint Elevation of Privilege Vulnerability'.
nvd
CVE-2020-1103P4MEDIUMCVSS 6.5v20162020-05-21
CVE-2020-1103 [MEDIUM] CWE-352 CVE-2020-1103: An information disclosure vulnerability exists where certain modes of the search function in Microso
An information disclosure vulnerability exists where certain modes of the search function in Microsoft SharePoint Server are vulnerable to cross-site search attacks (a variant of cross-site request forgery, CSRF).When users are simultaneously logged in to Microsoft SharePoint Server and visit a malicious web page, the attacker can, through standard br
nvd
CVE-2020-1443P4MEDIUMCVSS 5.4v20162020-07-14
CVE-2020-1443 [MEDIUM] CVE-2020-1443: A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specia
A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulnerability'.
nvd
CVE-2020-1454P4MEDIUMCVSS 5.4v20162020-07-14
CVE-2020-1454 [MEDIUM] CWE-79 CVE-2020-1454: This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted r
This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server.An authenticated attacker could exploit this vulnerability by sending a specially crafted request to an affected SharePoint server, aka 'Microsoft SharePoint Reflective XSS Vulnerability'.
nvd
CVE-2020-1444P4MEDIUMCVSS 4.3v20162020-07-14
CVE-2020-1444 [MEDIUM] CVE-2020-1444: A remote code execution vulnerability exists in the way Microsoft SharePoint software parses special
A remote code execution vulnerability exists in the way Microsoft SharePoint software parses specially crafted email messages, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'.
nvd
CVE-2020-0795P4MEDIUMCVSS 5.4v20162020-03-12
CVE-2020-0795 [MEDIUM] CWE-79 CVE-2020-0795: This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted r
This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server.An authenticated attacker could exploit this vulnerability by sending a specially crafted request to an affected SharePoint server, aka 'Microsoft SharePoint Reflective XSS Vulnerability'. This CVE ID is unique fro
nvd
CVE-2020-1342P4MEDIUMCVSS 5.5v2016v2013 Service Pack 12020-07-14
CVE-2020-1342 [MEDIUM] CWE-125 CVE-2020-1342: An information disclosure vulnerability exists when Microsoft Office software reads out of bound mem
An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory, aka 'Microsoft Office Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1445.
nvd
CVE-2019-1446P4MEDIUMCVSS 5.5v2013 Service Pack 12019-11-12
CVE-2019-1446 [MEDIUM] CWE-200 CVE-2019-1446: An information disclosure vulnerability exists when Microsoft Excel improperly discloses the content
An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel Information Disclosure Vulnerability'.
nvd
CVE-2019-1328P4MEDIUMCVSS 5.4v20162019-10-10
CVE-2019-1328 [MEDIUM] CWE-79 CVE-2019-1328: A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specia
A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulnerability'.
nvd
CVE-2019-0670P4MEDIUMCVSS 6.1v2013 Service Pack 12019-03-05
CVE-2019-0670 [MEDIUM] CWE-20 CVE-2019-0670: A spoofing vulnerability exists in Microsoft SharePoint when the application does not properly parse
A spoofing vulnerability exists in Microsoft SharePoint when the application does not properly parse HTTP content, aka 'Microsoft SharePoint Spoofing Vulnerability'.
nvd
CVE-2020-0972P4MEDIUMCVSS 5.4v2016v2013 Service Pack 12020-04-15
CVE-2020-0972 [MEDIUM] CVE-2020-0972: A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specia
A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulnerability'. This CVE ID is unique from CVE-2020-0975, CVE-2020-0976, CVE-2020-0977.
nvd
CVE-2020-1104P4MEDIUMCVSS 5.4v2016v2013 Service Pack 12020-05-21
CVE-2020-1104 [MEDIUM] CWE-79 CVE-2020-1104: A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specia
A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulnerability'. This CVE ID is unique from CVE-2020-1105, CVE-2020-1107.
nvd
CVE-2020-1323P4MEDIUMCVSS 6.1v20162020-06-09
CVE-2020-1323 [MEDIUM] CWE-601 CVE-2020-1323: An open redirect vulnerability exists in Microsoft SharePoint that could lead to spoofing.To exploit
An open redirect vulnerability exists in Microsoft SharePoint that could lead to spoofing.To exploit the vulnerability, an attacker could send a link that has a specially crafted URL and convince the user to click the link, aka 'SharePoint Open Redirect Vulnerability'.
nvd
CVE-2019-0778P4MEDIUMCVSS 5.4v20162019-04-09
CVE-2019-0778 [MEDIUM] CWE-79 CVE-2019-0778: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'.
nvd
CVE-2019-1329P4MEDIUMCVSS 5.4v20162019-10-10
CVE-2019-1329 [MEDIUM] CWE-79 CVE-2019-1329: An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sa
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1330.
nvd
CVE-2020-1099P4MEDIUMCVSS 5.4v20162020-05-21
CVE-2020-1099 [MEDIUM] CWE-79 CVE-2020-1099: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1100, CVE-2020-1101, CVE-2020-1106.
nvd
CVE-2020-1450P4MEDIUMCVSS 5.4v2016v2013 Service Pack 12020-07-14
CVE-2020-1450 [MEDIUM] CWE-79 CVE-2020-1450: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1451, CVE-2020-1456.
nvd
CVE-2020-0693P4MEDIUMCVSS 5.4v20162020-02-11
CVE-2020-0693 [MEDIUM] CWE-79 CVE-2020-0693: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0694.
nvd
CVE-2019-1134P4MEDIUMCVSS 5.4v2016v2013 Service Pack 12019-07-15
CVE-2019-1134 [MEDIUM] CWE-79 CVE-2019-1134: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'.
nvd
CVE-2019-0830P4MEDIUMCVSS 5.4v2016v2013 Service Pack 12019-04-09
CVE-2019-0830 [MEDIUM] CWE-79 CVE-2019-0830: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2019-0831.
nvd