Microsoft Sharepoint Foundation vulnerabilities

69 known vulnerabilities affecting microsoft/microsoft_sharepoint_foundation.

Total CVEs
69
CISA KEV
1
actively exploited
Public exploits
2
Exploited in wild
1
Severity breakdown
HIGH23MEDIUM46

Vulnerabilities

Page 4 of 4
CVE-2019-0949MEDIUMCVSS 5.7v2010 Service Pack 2v2013 Service Pack 12019-05-16
CVE-2019-0949 [MEDIUM] CWE-79 CVE-2019-0949: A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specia A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulnerability'. This CVE ID is unique from CVE-2019-0950, CVE-2019-0951.
cvelistv5nvd
CVE-2019-0951MEDIUMCVSS 5.7v2010 Service Pack 2v2013 Service Pack 12019-05-16
CVE-2019-0951 [MEDIUM] CVE-2019-0951: A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulnerability'. This CVE ID is unique from CVE-2019-0949, CVE-2019-0950.
cvelistv5
CVE-2019-0950MEDIUMCVSS 5.7v2013 Service Pack 12019-05-16
CVE-2019-0950 [MEDIUM] CVE-2019-0950: A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulnerability'. This CVE ID is unique from CVE-2019-0949, CVE-2019-0951.
cvelistv5
CVE-2019-0830MEDIUMCVSS 5.4v2010 Service Pack 22019-04-09
CVE-2019-0830 [MEDIUM] CWE-79 CVE-2019-0830: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2019-0831.
cvelistv5nvd
CVE-2019-0778MEDIUMCVSS 5.4v2013 Service Pack 12019-04-09
CVE-2019-0778 [MEDIUM] CWE-79 CVE-2019-0778: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'.
cvelistv5nvd
CVE-2019-0831MEDIUMCVSS 5.4v2010 Service Pack 22019-04-09
CVE-2019-0831 [MEDIUM] CVE-2019-0831: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an af A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2019-0830.
cvelistv5
CVE-2019-0604HIGHCVSS 8.8KEVPoCv2013 Service Pack 12019-03-06
CVE-2019-0604 [HIGH] CVE-2019-0604: A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0594.
cvelistv5
CVE-2019-0594HIGHCVSS 8.8v2013 Service Pack 12019-03-05
CVE-2019-0594 [HIGH] CWE-20 CVE-2019-0594: A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to chec A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0604.
cvelistv5nvd
CVE-2019-0670MEDIUMCVSS 6.1v2013 Service Pack 12019-03-05
CVE-2019-0670 [MEDIUM] CWE-20 CVE-2019-0670: A spoofing vulnerability exists in Microsoft SharePoint when the application does not properly parse A spoofing vulnerability exists in Microsoft SharePoint when the application does not properly parse HTTP content, aka 'Microsoft SharePoint Spoofing Vulnerability'.
cvelistv5nvd