Advisories · Technology
Microsoft SharePoint Server.
Every CVE that names Microsoft SharePoint Server among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
-
Microsoft Windows: An authentication bypass vulnerability exists in Windows Communication Foundation (WCF)…
- Microsoft Windows
- Microsoft Windows Server
-
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint…
- Microsoft SharePoint Foundation
- Microsoft SharePoint Server
-
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint…
- Microsoft SharePoint Enterprise Server
- Microsoft SharePoint Server
- CVSS 5.4 Medium
Cross-site scripting in Microsoft SharePoint Server and others
- Microsoft SharePoint Server
- Microsoft SharePoint Foundation
- Cross-site scripting (XSS)
- CVSS 5.4 Medium
Cross-site scripting in Microsoft SharePoint Foundation and others
- Microsoft SharePoint Foundation
- Microsoft SharePoint Enterprise Server
- Cross-site scripting (XSS)
- CVSS 9.8 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV · ransomware
Improper input validation in Microsoft SharePoint Server and others
- Microsoft SharePoint Server
- Microsoft SharePoint Foundation
- CWE-20
-
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vuln…
- Microsoft SharePoint Server
- Microsoft SharePoint Foundation
-
Microsoft Word: A remote code execution vulnerability exists in Microsoft Word software when it fails to…
- Microsoft Word
- Microsoft Office
-
Microsoft SharePoint Server: An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not…
- Microsoft SharePoint Server
- Microsoft SharePoint
- CVSS 5.4 Medium
Cross-site scripting in Microsoft SharePoint Server and others
- Microsoft SharePoint Server
- Microsoft SharePoint
- Cross-site scripting (XSS)
-
Microsoft SharePoint Server: An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not…
- Microsoft SharePoint Server
- Microsoft SharePoint
-
Microsoft Office: A remote code execution vulnerability exists in Microsoft PowerPoint software when the…
- Microsoft Office
- Microsoft PowerPoint
-
Microsoft SharePoint Server: An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not…
- Microsoft SharePoint Server
- Microsoft SharePoint
- CVSS 5.4 Medium
Cross-site scripting in Microsoft SharePoint Server and others
- Microsoft SharePoint Server
- Microsoft SharePoint
- Cross-site scripting (XSS)
-
Microsoft SharePoint Server: A remote code execution vulnerability exists in Microsoft Word software when it fails to…
- Microsoft SharePoint Server
- Microsoft Office
-
Microsoft SharePoint Server: A remote code execution vulnerability exists in Microsoft Word software when the software…
- Microsoft SharePoint Server
- Microsoft Office
-
Microsoft SharePoint Server: An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not…
- Microsoft SharePoint Server
- Microsoft SharePoint
-
Microsoft SharePoint Server: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does…
- Microsoft SharePoint Server
- Microsoft SharePoint
-
Microsoft Word: An information disclosure vulnerability exists when Microsoft Office software reads out…
- Microsoft Word
- Microsoft SharePoint Server
-
Microsoft SharePoint Server: An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not…
- Microsoft SharePoint Server
- Microsoft SharePoint
-
Microsoft SharePoint Server: An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not…
- Microsoft SharePoint Server
- Microsoft SharePoint
-
Microsoft SharePoint Server: An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not…
- Microsoft SharePoint Server
- Microsoft SharePoint
-
Microsoft Word: A remote code execution vulnerability exists when the Office graphics component…
- Microsoft Word
- Microsoft Office