Advisories · Technology
Microsoft SharePoint Server.
Every CVE that names Microsoft SharePoint Server among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.4 Medium
Cross-site scripting in Microsoft SharePoint Enterprise Server and others
- Microsoft SharePoint Enterprise Server
- Microsoft SharePoint Server
- Cross-site scripting (XSS)
- CVSS 5.4 Medium
Cross-site scripting in Microsoft SharePoint Enterprise Server and others
- Microsoft SharePoint Enterprise Server
- Microsoft SharePoint Server
- Cross-site scripting (XSS)
- CVSS 5.4 Medium
Cross-site scripting in Microsoft SharePoint Enterprise Server and others
- Microsoft SharePoint Enterprise Server
- Microsoft SharePoint Server
- Cross-site scripting (XSS)
- CVSS 5.4 Medium
Cross-site scripting in Microsoft SharePoint Enterprise Server and others
- Microsoft SharePoint Enterprise Server
- Microsoft SharePoint Server
- Cross-site scripting (XSS)
-
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'.
- Microsoft SharePoint Enterprise Server
- Microsoft SharePoint Server
-
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'.
- Microsoft SharePoint Enterprise Server
- Microsoft SharePoint Server
-
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'.
- Microsoft SharePoint Enterprise Server
- Microsoft SharePoint Server
-
An information disclosure vulnerability exists when Microsoft Office improperly discloses the contents of its memory, aka 'Microsoft Office Information Disclosure Vulnerability'.
- Microsoft SharePoint Enterprise Server
- Microsoft SharePoint Server
-
A remote code execution vulnerability exists in the way Microsoft SharePoint software parses specially crafted email messages, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'.
- Microsoft SharePoint Enterprise Server
- Microsoft SharePoint Server
-
A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulner…
- Microsoft SharePoint Enterprise Server
- Microsoft SharePoint Server
-
A remote code execution vulnerability exists in PerformancePoint Services for SharePoint Server when the software fails to check the source markup of XML file input, aka 'PerformancePoint Services Re…
- Microsoft SharePoint Enterprise Server
- Microsoft SharePoint Server
-
An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory, aka 'Microsoft O…
- Microsoft SharePoint Enterprise Server
- Microsoft SharePoint Server
-
An open redirect vulnerability exists in Microsoft SharePoint that could lead to spoofing.To exploit the vulnerability, an attacker could send a link that has a specially crafted URL and convince the…
- Microsoft SharePoint Enterprise Server
- Microsoft SharePoint Server
- CVSS 5.4 Medium
Cross-site scripting in Microsoft SharePoint Enterprise Server and others
- Microsoft SharePoint Enterprise Server
- Microsoft SharePoint Server
- Cross-site scripting (XSS)
- CVSS 5.4 Medium
Cross-site scripting in Microsoft SharePoint Enterprise Server and others
- Microsoft SharePoint Enterprise Server
- Microsoft SharePoint Server
- Cross-site scripting (XSS)
- CVSS 5.4 Medium
Cross-site scripting in Microsoft SharePoint Enterprise Server and others
- Microsoft SharePoint Enterprise Server
- Microsoft SharePoint Server
- Cross-site scripting (XSS)
- CVSS 5.4 Medium
Cross-site scripting in Microsoft SharePoint Enterprise Server and others
- Microsoft SharePoint Enterprise Server
- Microsoft SharePoint Server
- Cross-site scripting (XSS)
-
An elevation of privilege vulnerability exists in Microsoft SharePoint, aka 'Microsoft SharePoint Elevation of Privilege Vulnerability'.
- Microsoft SharePoint Enterprise Server
- Microsoft SharePoint Server
- CVSS 5.4 Medium
Cross-site scripting in Microsoft SharePoint Enterprise Server and others
- Microsoft SharePoint Enterprise Server
- Microsoft SharePoint Server
- Cross-site scripting (XSS)
-
A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net web controls, aka 'Microsoft SharePoint Server Remote Code Exe…
- Microsoft SharePoint Enterprise Server
- Microsoft SharePoint Server
-
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted authentication request to an affected SharePoint server, aka 'Microsoft…
- Microsoft SharePoint Enterprise Server
- Microsoft SharePoint Server
- CVSS 5.4 Medium
Cross-site scripting in Microsoft SharePoint Enterprise Server and others
- Microsoft SharePoint Enterprise Server
- Microsoft SharePoint Server
- Cross-site scripting (XSS)
-
A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulner…
- Microsoft SharePoint Enterprise Server
- Microsoft SharePoint Server
-
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'.
- Microsoft SharePoint Enterprise Server
- Microsoft SharePoint Server
- CVSS 5.4 Medium
Cross-site scripting in Microsoft SharePoint Enterprise Server and others
- Microsoft SharePoint Enterprise Server
- Microsoft SharePoint Server
- Cross-site scripting (XSS)
-
A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulner…
- Microsoft SharePoint Enterprise Server
- Microsoft SharePoint Server
-
A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulner…
- Microsoft SharePoint Enterprise Server
- Microsoft SharePoint Server
-
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vuln…
- Microsoft SharePoint Enterprise Server
- Microsoft SharePoint Server
- CVSS 5.4 Medium
Cross-site scripting in Microsoft SharePoint Enterprise Server and others
- Microsoft SharePoint Enterprise Server
- Microsoft SharePoint Server
- Cross-site scripting (XSS)
-
A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulner…
- Microsoft SharePoint Enterprise Server
- Microsoft SharePoint Server
-
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vuln…
- Microsoft SharePoint Enterprise Server
- Microsoft SharePoint Server
- CVSS 5.4 Medium
Cross-site scripting in Microsoft SharePoint Enterprise Server and others
- Microsoft SharePoint Enterprise Server
- Microsoft SharePoint Server
- Cross-site scripting (XSS)
- CVSS 5.4 Medium
Cross-site scripting in Microsoft SharePoint Enterprise Server and others
- Microsoft SharePoint Enterprise Server
- Microsoft SharePoint Server
- Cross-site scripting (XSS)
-
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vuln…
- Microsoft SharePoint Enterprise Server
- Microsoft SharePoint Server
-
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vuln…
- Microsoft SharePoint Foundation
- Microsoft SharePoint Enterprise Server
- CVSS 5.4 Medium
Cross-site scripting in Microsoft SharePoint Enterprise Server and others
- Microsoft SharePoint Enterprise Server
- Microsoft SharePoint Server
- Cross-site scripting (XSS)
-
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vuln…
- Microsoft SharePoint Enterprise Server
- Microsoft SharePoint Server
- CVSS 5.4 Medium
Cross-site scripting in Microsoft SharePoint Enterprise Server and others
- Microsoft SharePoint Enterprise Server
- Microsoft SharePoint Server
- Cross-site scripting (XSS)
- CVSS 5.4 Medium
Cross-site scripting in Microsoft SharePoint Enterprise Server and others
- Microsoft SharePoint Enterprise Server
- Microsoft SharePoint Server
- Cross-site scripting (XSS)
- CVSS 5.4 Medium
Cross-site scripting in Microsoft SharePoint Enterprise Server and others
- Microsoft SharePoint Enterprise Server
- Microsoft SharePoint Server
- Cross-site scripting (XSS)
- CVSS 5.4 Medium
Cross-site scripting in Microsoft SharePoint Enterprise Server and others
- Microsoft SharePoint Enterprise Server
- Microsoft SharePoint Server
- Cross-site scripting (XSS)
- CVSS 5.4 Medium
Cross-site scripting in Microsoft SharePoint Enterprise Server and others
- Microsoft SharePoint Enterprise Server
- Microsoft SharePoint Server
- Cross-site scripting (XSS)
-
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vuln…
- Microsoft SharePoint Enterprise Server
- Microsoft SharePoint Server
- CVSS 5.4 Medium
Cross-site scripting in Microsoft SharePoint Enterprise Server and others
- Microsoft SharePoint Enterprise Server
- Microsoft SharePoint Server
- Cross-site scripting (XSS)
- CVSS 5.4 Medium
Cross-site scripting in Microsoft SharePoint Enterprise Server and others
- Microsoft SharePoint Enterprise Server
- Microsoft SharePoint Server
- Cross-site scripting (XSS)
-
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'.
- Microsoft SharePoint Foundation
- Microsoft SharePoint Enterprise Server
- CVSS 5.4 Medium
Cross-site scripting in Microsoft SharePoint Enterprise Server and others
- Microsoft SharePoint Enterprise Server
- Microsoft SharePoint Server
- Cross-site scripting (XSS)
-
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'.
- Microsoft SharePoint Server
- Microsoft Office
-
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'.
- Microsoft SharePoint Enterprise Server
- Microsoft SharePoint Server
- CVSS 5.4 Medium
Cross-site scripting in Microsoft SharePoint Enterprise Server and others
- Microsoft SharePoint Enterprise Server
- Microsoft SharePoint Server
- Cross-site scripting (XSS)
- CVSS 5.4 Medium
Cross-site scripting in Microsoft SharePoint Enterprise Server and others
- Microsoft SharePoint Enterprise Server
- Microsoft SharePoint Server
- Cross-site scripting (XSS)
-
An information disclosure vulnerability exists in Microsoft SharePoint when an attacker uploads a specially crafted file to the SharePoint Server.An authenticated attacker who successfully exploited…
- Microsoft SharePoint Foundation
- Microsoft SharePoint Enterprise Server
-
A security feature bypass vulnerability exists when Microsoft Office does not validate URLs.An attacker could send a victim a specially crafted file, which could trick the victim into entering creden…
- Microsoft SharePoint Server
-
An elevation of privilege vulnerability exists in Microsoft SharePoint, aka 'Microsoft SharePoint Elevation of Privilege Vulnerability'.
- Microsoft SharePoint Foundation
- Microsoft SharePoint Enterprise Server
-
A remote code execution vulnerability exists in Microsoft SharePoint where APIs aren't properly protected from unsafe data input, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'.
- Microsoft SharePoint Foundation
- Microsoft SharePoint Enterprise Server
-
A remote code execution vulnerability exists in Microsoft SharePoint where APIs aren't properly protected from unsafe data input, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'.
- Microsoft SharePoint Foundation
- Microsoft SharePoint Enterprise Server
-
A spoofing vulnerability exists in Microsoft SharePoint when it improperly handles requests to authorize applications, resulting in cross-site request forgery (CSRF).To exploit this vulnerability, an…
- Microsoft SharePoint Foundation
- Microsoft SharePoint Enterprise Server
-
An elevation of privilege vulnerability exists in Microsoft SharePoint, aka 'Microsoft SharePoint Elevation of Privilege Vulnerability'.
- Microsoft SharePoint Foundation
- Microsoft SharePoint Enterprise Server
-
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vuln…
- Microsoft SharePoint Foundation
- Microsoft SharePoint Enterprise Server
- CVSS 5.4 Medium
Cross-site scripting in Microsoft SharePoint Enterprise Server and others
- Microsoft SharePoint Enterprise Server
- Microsoft SharePoint Server
- Cross-site scripting (XSS)