Microsoft Sharepoint Foundation vulnerabilities
33 known vulnerabilities affecting microsoft/microsoft_sharepoint_foundation.
Total CVEs
33
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
HIGH10MEDIUM23
Vulnerabilities
Page 2 of 2
CVE-2019-0670P4MEDIUMCVSS 6.1v2013 Service Pack 12019-03-05
CVE-2019-0670 [MEDIUM] CWE-20 CVE-2019-0670: A spoofing vulnerability exists in Microsoft SharePoint when the application does not properly parse
A spoofing vulnerability exists in Microsoft SharePoint when the application does not properly parse HTTP content, aka 'Microsoft SharePoint Spoofing Vulnerability'.
nvd
CVE-2020-1104P4MEDIUMCVSS 5.4v2013 Service Pack 12020-05-21
CVE-2020-1104 [MEDIUM] CWE-79 CVE-2020-1104: A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specia
A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulnerability'. This CVE ID is unique from CVE-2020-1105, CVE-2020-1107.
nvd
CVE-2020-1323P4MEDIUMCVSS 6.1v2013 Service Pack 12020-06-09
CVE-2020-1323 [MEDIUM] CWE-601 CVE-2020-1323: An open redirect vulnerability exists in Microsoft SharePoint that could lead to spoofing.To exploit
An open redirect vulnerability exists in Microsoft SharePoint that could lead to spoofing.To exploit the vulnerability, an attacker could send a link that has a specially crafted URL and convince the user to click the link, aka 'SharePoint Open Redirect Vulnerability'.
nvd
CVE-2019-0778P4MEDIUMCVSS 5.4v2013 Service Pack 12019-04-09
CVE-2019-0778 [MEDIUM] CWE-79 CVE-2019-0778: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'.
nvd
CVE-2019-1329P4MEDIUMCVSS 5.4v2013 Service Pack 12019-10-10
CVE-2019-1329 [MEDIUM] CWE-79 CVE-2019-1329: An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sa
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1330.
nvd
CVE-2020-1148P4MEDIUMCVSS 5.4v2010 Service Pack 22020-06-09
CVE-2020-1148 [MEDIUM] CWE-79 CVE-2020-1148: A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specia
A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulnerability'. This CVE ID is unique from CVE-2020-1289.
nvd
CVE-2020-1099P4MEDIUMCVSS 5.4v2013 Service Pack 12020-05-21
CVE-2020-1099 [MEDIUM] CWE-79 CVE-2020-1099: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1100, CVE-2020-1101, CVE-2020-1106.
nvd
CVE-2019-0963P4MEDIUMCVSS 5.4v2013 Service Pack 12019-05-16
CVE-2019-0963 [MEDIUM] CWE-79 CVE-2019-0963: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'.
nvd
CVE-2019-0830P4MEDIUMCVSS 5.4v2010 Service Pack 22019-04-09
CVE-2019-0830 [MEDIUM] CWE-79 CVE-2019-0830: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2019-0831.
nvd
CVE-2020-0923P4MEDIUMCVSS 5.4v2013 Service Pack 12020-04-15
CVE-2020-0923 [MEDIUM] CWE-79 CVE-2020-0923: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0924, CVE-2020-0925, CVE-2020-0926, CVE-2020-0927, CVE-2020-0930, CVE-2020-0933, CVE-2020
nvd
CVE-2019-1070P4MEDIUMCVSS 5.4v2013 Service Pack 12019-10-10
CVE-2019-1070 [MEDIUM] CWE-79 CVE-2019-1070: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'.
nvd
CVE-2020-1177P4MEDIUMCVSS 5.4v2013 Service Pack 12020-06-09
CVE-2020-1177 [MEDIUM] CWE-79 CVE-2020-1177: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1183, CVE-2020-1297, CVE-2020-1298, CVE-2020-1318, CVE-2020-1320.
nvd
CVE-2020-0893P4MEDIUMCVSS 5.4v2010 Service Pack 2v2013 Service Pack 12020-03-12
CVE-2020-0893 [MEDIUM] CWE-79 CVE-2020-0893: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0894.
nvd
← Previous2 / 2