Advisories · Technology

Microsoft SharePoint Foundation 2013 Service Pack 1.

Every CVE that names Microsoft SharePoint Foundation 2013 Service Pack 1 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-28288 CVE record

CVSS 8.1 High

Microsoft SharePoint Server Spoofing Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
- Server-side request forgery (SSRF)
Not analysed yet 11 Apr 2023
CVE-2023-23395 CVE record

CVSS 3.1 Low

Microsoft SharePoint Server Spoofing Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
- Open redirect
Not analysed yet 14 Mar 2023
CVE-2023-21717 CVE record

CVSS 8.8 High

Microsoft SharePoint Server Elevation of Privilege Vulnerability
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
- Microsoft SharePoint Enterprise Server 2016
- Broken access control
Not analysed yet 14 Feb 2023
CVE-2023-21716 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Microsoft Word Remote Code Execution Vulnerability
- Microsoft 365 Apps for Enterprise
- Microsoft Office 2019
- Memory corruption
Not analysed yet 14 Feb 2023
CVE-2023-21744 CVE record

CVSS 8.8 High

Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
- Insecure deserialization
Not analysed yet 10 Jan 2023
CVE-2023-21742 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
- Broken access control
Not analysed yet 10 Jan 2023
CVE-2022-44693 CVE record

CVSS 8.8 High

Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
Not analysed yet 13 Dec 2022
CVE-2022-44690 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
Not analysed yet 13 Dec 2022
CVE-2022-41122 CVE record

CVSS 6.5 Medium

Microsoft SharePoint Server Spoofing Vulnerability
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
- Microsoft SharePoint Enterprise Server 2016
Not analysed yet 9 Nov 2022
CVE-2022-41062 CVE record

CVSS 8.8 High

Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
- Microsoft SharePoint Enterprise Server 2016
Not analysed yet 9 Nov 2022
CVE-2022-41038 CVE record

CVSS 8.8 High

Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
Not analysed yet 11 Oct 2022
CVE-2022-41037 CVE record

CVSS 8.8 High

Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
Not analysed yet 11 Oct 2022
CVE-2022-41036 CVE record

CVSS 8.8 High

Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
Not analysed yet 11 Oct 2022
CVE-2022-38053 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
Not analysed yet 11 Oct 2022
CVE-2022-38009 CVE record

CVSS 8.8 High

Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
Not analysed yet 13 Sept 2022
CVE-2022-38008 CVE record

CVSS 8.8 High

Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
Not analysed yet 13 Sept 2022
CVE-2022-37961 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
Not analysed yet 13 Sept 2022
CVE-2022-35823 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Microsoft SharePoint Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
Not analysed yet 13 Sept 2022
CVE-2022-30158 CVE record

CVSS 8.8 High

Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
Not analysed yet 15 Jun 2022
CVE-2022-29108 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
Not analysed yet 10 May 2022
CVE-2022-24472 CVE record

CVSS 8.0 High

Microsoft SharePoint Server Spoofing Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-21968 CVE record

CVSS 4.3 Medium

Microsoft SharePoint Server Security Feature Bypass Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
Not analysed yet 9 Feb 2022
CVE-2022-21840 CVE record

CVSS 8.8 High

Microsoft Office Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
Not analysed yet 11 Jan 2022
CVE-2022-21837 CVE record

CVSS 8.3 High

Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
Not analysed yet 11 Jan 2022
CVE-2021-43242 CVE record

CVSS 7.6 High

Microsoft SharePoint Server Spoofing Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
Not analysed yet 15 Dec 2021
CVE-2021-42309 CVE record

CVSS 8.8 High

Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
Not analysed yet 15 Dec 2021
CVE-2021-42294 CVE record

CVSS 7.2 High

Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
Not analysed yet 15 Dec 2021
CVE-2021-41344 CVE record

CVSS 8.1 High

Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
Not analysed yet 13 Oct 2021
CVE-2021-40487 CVE record

CVSS 8.1 HighCritical · CVSS 7+ and EPSS

Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- Code injection
Not analysed yet 13 Oct 2021
CVE-2021-40484 CVE record

CVSS 7.6 High

Microsoft SharePoint Server Spoofing Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
Not analysed yet 13 Oct 2021
CVE-2021-38652 CVE record

CVSS 7.6 High

Microsoft SharePoint Server Spoofing Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Foundation 2013 Service Pack 1
Not analysed yet 15 Sept 2021
CVE-2021-38651 CVE record

CVSS 7.6 High

Microsoft SharePoint Server Spoofing Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Foundation 2013 Service Pack 1
Not analysed yet 15 Sept 2021
CVE-2021-34467 CVE record

CVSS 7.1 High

Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Foundation 2013 Service Pack 1
Not analysed yet 16 Jul 2021
CVE-2021-34520 CVE record

CVSS 8.1 High

Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Foundation 2013 Service Pack 1
Not analysed yet 14 Jul 2021
CVE-2021-34519 CVE record

CVSS 5.3 Medium

Microsoft SharePoint Server Information Disclosure Vulnerability
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
- Microsoft SharePoint Enterprise Server 2016
Not analysed yet 14 Jul 2021
CVE-2021-34517 CVE record

CVSS 5.3 Medium

Microsoft SharePoint Server Spoofing Vulnerability
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
- Microsoft SharePoint Enterprise Server 2016
Not analysed yet 14 Jul 2021
CVE-2021-34468 CVE record

CVSS 7.1 High

Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Foundation 2013 Service Pack 1
Not analysed yet 14 Jul 2021
CVE-2021-31966 CVE record

CVSS 7.2 High

Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
Not analysed yet 8 Jun 2021
CVE-2021-31965 CVE record

CVSS 5.7 Medium

Microsoft SharePoint Server Information Disclosure Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
Not analysed yet 8 Jun 2021
CVE-2021-31964 CVE record

CVSS 7.6 High

Microsoft SharePoint Server Spoofing Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
Not analysed yet 8 Jun 2021
CVE-2021-31963 CVE record

CVSS 7.1 High

Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
Not analysed yet 8 Jun 2021
CVE-2021-31950 CVE record

CVSS 7.6 High

Microsoft SharePoint Server Spoofing Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
Not analysed yet 8 Jun 2021
CVE-2021-31948 CVE record

CVSS 7.6 High

Microsoft SharePoint Server Spoofing Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
Not analysed yet 8 Jun 2021
CVE-2021-26420 CVE record

CVSS 7.1 High

Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
Not analysed yet 8 Jun 2021
CVE-2021-31181 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Microsoft SharePoint Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- Code injection
Not analysed yet 11 May 2021
CVE-2021-31173 CVE record

CVSS 5.3 Medium

Microsoft SharePoint Server Information Disclosure Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- Information disclosure
Not analysed yet 11 May 2021
CVE-2021-31172 CVE record

CVSS 7.1 High

Microsoft SharePoint Server Spoofing Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- Authentication bypass
Not analysed yet 11 May 2021
CVE-2021-31171 CVE record

CVSS 4.1 Medium

Microsoft SharePoint Information Disclosure Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
Not analysed yet 11 May 2021
CVE-2021-28478 CVE record

CVSS 7.6 High

Microsoft SharePoint Server Spoofing Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- Authentication bypass
Not analysed yet 11 May 2021
CVE-2021-28474 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
Not analysed yet 11 May 2021
CVE-2021-26418 CVE record

CVSS 4.6 Medium

Microsoft SharePoint Server Spoofing Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- Authentication bypass
Not analysed yet 11 May 2021
CVE-2021-27076 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft Business Productivity Servers 2010 Service Pack 2
- Microsoft SharePoint Enterprise Server 2016
Not analysed yet 11 Mar 2021
CVE-2021-24104 CVE record

CVSS 4.6 Medium

Microsoft SharePoint Server Spoofing Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Foundation 2013 Service Pack 1
Not analysed yet 11 Mar 2021
CVE-2021-24072 CVE record

CVSS 8.8 High

Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
Not analysed yet 25 Feb 2021
CVE-2021-24071 CVE record

CVSS 5.3 Medium

Microsoft SharePoint Information Disclosure Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
Not analysed yet 25 Feb 2021
CVE-2021-24066 CVE record

CVSS 8.8 High

Microsoft SharePoint Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
Not analysed yet 25 Feb 2021
CVE-2021-1726 CVE record

CVSS 8.0 High

Microsoft SharePoint Server Spoofing Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
Not analysed yet 25 Feb 2021
CVE-2021-1717 CVE record

CVSS 4.6 Medium

Microsoft SharePoint Server Spoofing Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
Not analysed yet 12 Jan 2021
CVE-2021-1712 CVE record

CVSS 8.0 High

Microsoft SharePoint Elevation of Privilege Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
Not analysed yet 12 Jan 2021
CVE-2021-1707 CVE record

CVSS 8.8 High

Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
Not analysed yet 12 Jan 2021