Microsoft Sharepoint Foundation vulnerabilities
226 known vulnerabilities affecting microsoft/sharepoint_foundation.
Total CVEs
226
CISA KEV
1
actively exploited
Public exploits
12
Exploited in wild
8
Severity breakdown
CRITICAL11HIGH89MEDIUM116LOW10
Vulnerabilities
Page 8 of 12
CVE-2019-0949P4MEDIUMCVSS 5.7v20132019-05-16
CVE-2019-0949 [MEDIUM] CWE-79 CVE-2019-0949: A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specia
A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulnerability'. This CVE ID is unique from CVE-2019-0950, CVE-2019-0951.
nvd
CVE-2022-24472P4MEDIUMCVSS 5.7v20132022-04-15
CVE-2022-24472 [MEDIUM] CVE-2022-24472: Microsoft SharePoint Server Spoofing Vulnerability
Microsoft SharePoint Server Spoofing Vulnerability
nvd
CVE-2012-1863P4MEDIUMCVSS 4.3v20102012-07-10
CVE-2012-1863 [MEDIUM] CWE-79 CVE-2012-1863: Cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint Server 2007 SP2 and SP3 Wind
Cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint Server 2007 SP2 and SP3 Windows SharePoint Services 3.0 SP2, and SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via crafted JavaScript elements in a URL, aka "SharePoint Reflected List Parameter Vulnerability."
nvd
CVE-2020-16944P4MEDIUMCVSS 5.4v20132020-10-16
CVE-2020-16944 [MEDIUM] CWE-79 CVE-2020-16944: <p>This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafte
This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server.
An authenticated attacker could exploit this vulnerability by sending a specially crafted request to an affected SharePoint server. The attacker who successfully exploited this vulnerability could then perform c
nvd
CVE-2020-1104P4MEDIUMCVSS 5.4v2013-sp12020-05-21
CVE-2020-1104 [MEDIUM] CWE-79 CVE-2020-1104: A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specia
A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint server.
The attacker who successfully exploited the vulnerability could t
nvd
CVE-2020-0795P4MEDIUMCVSS 5.4v20132020-03-12
CVE-2020-0795 [MEDIUM] CWE-79 CVE-2020-0795: This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted r
This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server.An authenticated attacker could exploit this vulnerability by sending a specially crafted request to an affected SharePoint server, aka 'Microsoft SharePoint Reflective XSS Vulnerability'. This CVE ID is unique fro
nvd
CVE-2019-1328P4MEDIUMCVSS 5.4v2010v20132019-10-10
CVE-2019-1328 [MEDIUM] CWE-79 CVE-2019-1328: A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specia
A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulnerability'.
nvd
CVE-2020-0891P4MEDIUMCVSS 5.4v2010v20132020-03-12
CVE-2020-0891 [MEDIUM] CVE-2020-0891: This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted r
This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server.An authenticated attacker could exploit this vulnerability by sending a specially crafted request to an affected SharePoint server, aka 'Microsoft SharePoint Reflective XSS Vulnerability'. This CVE ID is unique from CVE-2
nvd
CVE-2021-28450P4MEDIUMCVSS 6.5v20102021-04-13
CVE-2021-28450 [MEDIUM] CVE-2021-28450: Microsoft SharePoint Denial of Service Vulnerability
Microsoft SharePoint Denial of Service Vulnerability
nvd
CVE-2018-8155P4MEDIUMCVSS 5.4v2013-sp12018-05-09
CVE-2018-8155 [MEDIUM] CVE-2018-8155: An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sa
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint. This CVE ID is unique from CVE-2018-8149, CVE-2018-8156, CVE-2018-8168.
nvd
CVE-2018-8252P4MEDIUMCVSS 5.4v2013-sp12018-06-14
CVE-2018-8252 [MEDIUM] CWE-79 CVE-2018-8252: An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sa
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint. This CVE ID is unique from CVE-2018-8254.
nvd
CVE-2018-8254P4MEDIUMCVSS 5.4v2013-sp12018-06-14
CVE-2018-8254 [MEDIUM] CVE-2018-8254: An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sa
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft Project Server, Microsoft SharePoint. This CVE ID is unique from CVE-2018-8252.
nvd
CVE-2018-8299P4MEDIUMCVSS 5.4v2013-sp12018-07-11
CVE-2018-8299 [MEDIUM] CWE-79 CVE-2018-8299: An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sa
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint. This CVE ID is unique from CVE-2018-8323.
nvd
CVE-2018-8568P4MEDIUMCVSS 5.4v2013-sp12018-11-14
CVE-2018-8568 [MEDIUM] CWE-79 CVE-2018-8568: An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sa
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint Server, Microsoft SharePoint. This CVE ID is unique from CVE-2018-8572.
nvd
CVE-2011-0653P4MEDIUMCVSS 4.3v20102011-09-15
CVE-2011-0653 [MEDIUM] CWE-79 CVE-2011-0653: Cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint Server 2010 Gold and SP1, an
Cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint Server 2010 Gold and SP1, and SharePoint Foundation 2010, allows remote attackers to inject arbitrary web script or HTML via the URI, aka "XSS in SharePoint Calendar Vulnerability."
nvd
CVE-2020-0976P4MEDIUMCVSS 5.4v20132020-04-15
CVE-2020-0976 [MEDIUM] CVE-2020-0976: A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specia
A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulnerability'. This CVE ID is unique from CVE-2020-0972, CVE-2020-0975, CVE-2020-0977.
nvd
CVE-2011-1893P4MEDIUMCVSS 4.3v20102011-09-15
CVE-2011-1893 [MEDIUM] CWE-79 CVE-2011-1893: Cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint Server 2010, Windows SharePo
Cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint Server 2010, Windows SharePoint Services 2.0 and 3.0 SP2, and SharePoint Foundation 2010 allows remote attackers to inject arbitrary web script or HTML via the URI, aka "SharePoint XSS Vulnerability."
nvd
CVE-2011-1891P4MEDIUMCVSS 4.3v20102011-09-15
CVE-2011-1891 [MEDIUM] CWE-79 CVE-2011-1891: Cross-site scripting (XSS) vulnerability in Microsoft Windows SharePoint Services 3.0 SP2, and Share
Cross-site scripting (XSS) vulnerability in Microsoft Windows SharePoint Services 3.0 SP2, and SharePoint Foundation 2010 Gold and SP1, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters in a request to a script, aka "Contact Details Reflected XSS Vulnerability."
nvd
CVE-2020-1573P4MEDIUMCVSS 5.4v2010v20132020-08-17
CVE-2020-1573 [MEDIUM] CWE-79 CVE-2020-1573: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint server.
The attacker who successfully exploited the vul
nvd
CVE-2020-1101P4MEDIUMCVSS 5.4v2013-sp12020-05-21
CVE-2020-1101 [MEDIUM] CWE-79 CVE-2020-1101: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint server.
The attacker who successfully exploited the vul
nvd