PS
Product
Project Server
24
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 12Medium 7Low 0
Watch
Add Project Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-0944 | 8.8 | Mar 14 | Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allows an elevation of privilege vulnerability to due how specially crafted web requests are… Affected: 2013 |
| CVE-2018-0916 | 8.8 | Mar 14 | Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how specially crafted web requests are… Affected: 2013 |
| CVE-2018-0915 | 8.8 | Mar 14 | Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how specially crafted web requests are… Affected: 2013 |
| CVE-2018-0914 | 8.8 | Mar 14 | Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how specially crafted web requests are… Affected: 2013 |
| CVE-2018-0913 | 8.8 | Mar 14 | Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how specially crafted web requests are… Affected: 2013 |
| CVE-2018-0912 | 8.8 | Mar 14 | Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how specially crafted web requests are… Affected: 2013 |
| CVE-2018-0911 | 8.8 | Mar 14 | Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how specially crafted web requests are… Affected: 2013 |
| CVE-2018-0910 | 8.8 | Mar 14 | Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how specially crafted web requests are… Affected: 2013 |
| CVE-2018-0909 | 8.8 | Mar 14 | Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how specially crafted web requests are… Affected: 2013 |
| CVE-2017-11876 | 8.8 | Nov 15 | Microsoft Project Server and Microsoft SharePoint Enterprise Server 2016 allow an attacker to use cross-site forgery to read content that they are not authorized to read, use the… Affected: 2013 |
| CVE-2018-8284 | 8.1 | Jul 11 | A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka ".NET Framework Remote Code Injection Vulnerability." This… Affected: 2010; 2013 |
| CVE-2017-0281 | 7.8 | May 12 | Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2016, Office Online Server 2016, Office Web Apps 2010 SP2,Office Web Apps 2013 SP1, Project Server 2013 SP1,… Affected: 2013 |
| CVE-2017-8551 | 6.1 | Jun 15 | An elevation of privilege vulnerability exists when Microsoft SharePoint software fails to properly sanitize a specially crafted requests, aka "Microsoft SharePoint XSS… Affected: 2013 |
| CVE-2020-0954 | 5.4 | Apr 15 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka… Affected: 2013 |
| CVE-2019-1036 | 5.4 | Jun 12 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server Affected: 2010 |
| CVE-2019-1033 | 5.4 | Jun 12 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server Affected: 2010 |
| CVE-2019-1031 | 5.4 | Jun 12 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server Affected: 2010 |
| CVE-2018-8254 | 5.4 | Jun 14 | An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka… Affected: 2010 |
| CVE-2018-8156 | 5.4 | May 9 | An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka… Affected: 2010; 2013 |
| CVE-2015-2503 | – | Nov 11 | Microsoft Access 2007 SP3, Excel 2007 SP3, InfoPath 2007 SP3, OneNote 2007 SP3, PowerPoint 2007 SP3, Project 2007 SP3, Publisher 2007 SP3, Visio 2007 SP3, Word 2007 SP3, Office… Affected: 2010; 2013 |
| CVE-2015-1640 | – | Apr 14 | Cross-site scripting (XSS) vulnerability in Microsoft Project Server 2010 SP2 and 2013 SP1 allows remote attackers to inject arbitrary web script or HTML via a crafted request,… Affected: 2010; 2013 |
| CVE-2014-0251 | – | May 14 | Microsoft Windows SharePoint Services 3.0 SP3; SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013 Gold and SP1; SharePoint Foundation 2010 SP1 and SP2 and 2013 Gold and SP1;… Affected: 2010; 2010; 2013; 2013 |
| CVE-2009-0102 | – | Dec 9 | Microsoft Project 2000 SR1 and 2002 SP1, and Office Project 2003 SP3, does not properly handle memory allocation for Project files, which allows remote attackers to execute… Affected: 2003; 2007; 2007 |
| CVE-2006-6617 | – | Dec 18 | projectserver/logon/pdsrequest.asp in Microsoft Project Server 2003 allows remote authenticated users to obtain the MSProjectUser password for a SQL database via a… Affected: 2003 |
Showing 24