Microsoft Sharepoint Foundation vulnerabilities
226 known vulnerabilities affecting microsoft/sharepoint_foundation.
Total CVEs
226
CISA KEV
1
actively exploited
Public exploits
12
Exploited in wild
8
Severity breakdown
CRITICAL11HIGH89MEDIUM116LOW10
Vulnerabilities
Page 10 of 12
CVE-2020-0972P4MEDIUMCVSS 5.4v2010v20132020-04-15
CVE-2020-0972 [MEDIUM] CVE-2020-0972: A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specia
A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulnerability'. This CVE ID is unique from CVE-2020-0975, CVE-2020-0976, CVE-2020-0977.
nvd
CVE-2018-8572P4MEDIUMCVSS 5.4v2013-sp12018-11-14
CVE-2018-8572 [MEDIUM] CVE-2018-8572: An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sa
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint Server, Microsoft SharePoint. This CVE ID is unique from CVE-2018-8568.
nvd
CVE-2019-0951P4MEDIUMCVSS 5.4v2010v20132019-05-16
CVE-2019-0951 [MEDIUM] CVE-2019-0951: A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specia
A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulnerability'. This CVE ID is unique from CVE-2019-0949, CVE-2019-0950.
nvd
CVE-2019-1329P4MEDIUMCVSS 5.4v2010v20132019-10-10
CVE-2019-1329 [MEDIUM] CWE-79 CVE-2019-1329: An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sa
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1330.
nvd
CVE-2013-0083P4MEDIUMCVSS 4.3v20102013-03-13
CVE-2013-0083 [MEDIUM] CWE-79 CVE-2013-0083: Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 SP1 allows remote attac
Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 SP1 allows remote attackers to inject arbitrary web script or HTML via crafted content, leading to administrative command execution, aka "SharePoint XSS Vulnerability."
nvd
CVE-2014-1754P4MEDIUMCVSS 4.3v20132014-05-14
CVE-2014-1754 [MEDIUM] CWE-79 CVE-2014-1754: Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2013 Gold and SP1, SharePoin
Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2013 Gold and SP1, SharePoint Foundation 2013 Gold and SP1, Office Web Apps Server 2013 Gold and SP1, and SharePoint Server 2013 Client Components SDK allows remote attackers to inject arbitrary web script or HTML via a crafted request, aka "SharePoint XSS Vulnerability."
nvd
CVE-2020-0924P4MEDIUMCVSS 5.4v20132020-04-15
CVE-2020-0924 [MEDIUM] CVE-2020-0924: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0923, CVE-2020-0925, CVE-2020-0926, CVE-2020-0927, CVE-2020-0930, CVE-2020-0933, CVE-2020-0954,
nvd
CVE-2017-8745P4MEDIUMCVSS 5.4v20132017-09-13
CVE-2017-8745 [MEDIUM] CWE-79 CVE-2017-8745: An elevation of privilege vulnerability exists in Microsoft SharePoint Foundation 2013 Service Pack
An elevation of privilege vulnerability exists in Microsoft SharePoint Foundation 2013 Service Pack 1 when it does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Cross Site Scripting Vulnerability".
nvd
CVE-2017-0255P4MEDIUMCVSS 5.4v20132017-05-12
CVE-2017-0255 [MEDIUM] CWE-79 CVE-2017-0255: Microsoft SharePoint Foundation 2013 SP1 allows an elevation of privilege vulnerability when it does
Microsoft SharePoint Foundation 2013 SP1 allows an elevation of privilege vulnerability when it does not properly sanitize a specially crafted web request, aka "Microsoft SharePoint XSS Vulnerability".
nvd
CVE-2019-0778P4MEDIUMCVSS 5.4v20132019-04-09
CVE-2019-0778 [MEDIUM] CWE-79 CVE-2019-0778: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'.
nvd
CVE-2019-0963P4MEDIUMCVSS 5.4v20132019-05-16
CVE-2019-0963 [MEDIUM] CWE-79 CVE-2019-0963: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'.
nvd
CVE-2020-0923P4MEDIUMCVSS 5.4v20132020-04-15
CVE-2020-0923 [MEDIUM] CWE-79 CVE-2020-0923: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0924, CVE-2020-0925, CVE-2020-0926, CVE-2020-0927, CVE-2020-0930, CVE-2020-0933, CVE-2020
nvd
CVE-2020-0933P4MEDIUMCVSS 5.4v20132020-04-15
CVE-2020-0933 [MEDIUM] CVE-2020-0933: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0923, CVE-2020-0924, CVE-2020-0925, CVE-2020-0926, CVE-2020-0927, CVE-2020-0930, CVE-2020-0954,
nvd
CVE-2020-0978P4MEDIUMCVSS 5.4v20132020-04-15
CVE-2020-0978 [MEDIUM] CVE-2020-0978: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0923, CVE-2020-0924, CVE-2020-0925, CVE-2020-0926, CVE-2020-0927, CVE-2020-0930, CVE-2020-0933,
nvd
CVE-2020-0925P4MEDIUMCVSS 5.4v2010v20132020-04-15
CVE-2020-0925 [MEDIUM] CVE-2020-0925: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0923, CVE-2020-0924, CVE-2020-0926, CVE-2020-0927, CVE-2020-0930, CVE-2020-0933, CVE-2020-0954,
nvd
CVE-2021-24104P4MEDIUMCVSS 5.4v2013-sp12021-03-11
CVE-2021-24104 [MEDIUM] CVE-2021-24104: Microsoft SharePoint Server Spoofing Vulnerability
Microsoft SharePoint Server Spoofing Vulnerability
nvd
CVE-2020-1289P4MEDIUMCVSS 5.4v20102020-06-09
CVE-2020-1289 [MEDIUM] CVE-2020-1289: A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specia
A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulnerability'. This CVE ID is unique from CVE-2020-1148.
nvd
CVE-2012-1861P4MEDIUMCVSS 4.3v20102012-07-10
CVE-2012-1861 [MEDIUM] CWE-79 CVE-2012-1861: Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 Gold and SP1, SharePoin
Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 Gold and SP1, SharePoint Foundation 2010 Gold and SP1, and Office Web Apps 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via crafted JavaScript elements in a URL, aka "SharePoint Script in Username Vulnerability."
nvd
CVE-2019-0830P4MEDIUMCVSS 5.4v20132019-04-09
CVE-2019-0830 [MEDIUM] CWE-79 CVE-2019-0830: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2019-0831.
nvd
CVE-2019-0831P4MEDIUMCVSS 5.4v20102019-04-09
CVE-2019-0831 [MEDIUM] CVE-2019-0831: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2019-0830.
nvd