Advisories · Technology
Microsoft SharePoint Enterprise Server.
Every CVE that names Microsoft SharePoint Enterprise Server among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
-
A remote code execution vulnerability exists in Microsoft SharePoint where APIs aren't properly protected from unsafe data input, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'.
- Microsoft SharePoint Foundation
- Microsoft SharePoint Enterprise Server
-
A spoofing vulnerability exists in Microsoft SharePoint when it improperly handles requests to authorize applications, resulting in cross-site request forgery (CSRF).To exploit this vulnerability, an…
- Microsoft SharePoint Foundation
- Microsoft SharePoint Enterprise Server
-
An elevation of privilege vulnerability exists in Microsoft SharePoint, aka 'Microsoft SharePoint Elevation of Privilege Vulnerability'.
- Microsoft SharePoint Foundation
- Microsoft SharePoint Enterprise Server
-
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vuln…
- Microsoft SharePoint Foundation
- Microsoft SharePoint Enterprise Server
- CVSS 5.4 Medium
Cross-site scripting in Microsoft SharePoint Enterprise Server and others
- Microsoft SharePoint Enterprise Server
- Microsoft SharePoint Server
- Cross-site scripting (XSS)
-
Microsoft Windows: An authentication bypass vulnerability exists in Windows Communication Foundation (WCF)…
- Microsoft Windows
- Microsoft Windows Server
-
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint…
- Microsoft SharePoint Enterprise Server
- Microsoft SharePoint Server
-
An information disclosure vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint…
- Microsoft SharePoint Foundation
- Microsoft SharePoint Enterprise Server
-
A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net web controls, aka 'Microsoft SharePoint Server Remote Code Exe…
- Microsoft SharePoint Foundation
- Microsoft SharePoint Enterprise Server
-
A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulner…
- Microsoft SharePoint Foundation
- Microsoft SharePoint Enterprise Server
-
A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulner…
- Microsoft SharePoint Foundation
- Microsoft SharePoint Enterprise Server
- CVSS 5.4 Medium
Cross-site scripting in Microsoft SharePoint Server and others
- Microsoft SharePoint Server
- Microsoft SharePoint Foundation
- Cross-site scripting (XSS)
- CVSS 5.4 Medium
Cross-site scripting in Microsoft SharePoint Foundation and others
- Microsoft SharePoint Foundation
- Microsoft SharePoint Enterprise Server
- Cross-site scripting (XSS)
-
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office S…
- Microsoft SharePoint Foundation
- Microsoft SharePoint Enterprise Server
-
A spoofing vulnerability exists in Microsoft SharePoint when the application does not properly parse HTTP content, aka 'Microsoft SharePoint Spoofing Vulnerability'.
- Microsoft SharePoint Foundation
- Microsoft SharePoint Enterprise Server
-
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint…
- Microsoft SharePoint Enterprise Server
- CVSS 9.8 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV · ransomware
Improper input validation in Microsoft SharePoint Server and others
- Microsoft SharePoint Server
- Microsoft SharePoint Foundation
- CWE-20
-
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vuln…
- Microsoft SharePoint Server
- Microsoft SharePoint Foundation