SF
Product
Sharepoint Foundation
On CISA KEVExploited in the wildRansomware-linked
226
CVEs
1
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 5High 93Medium 89Low 1
Watch
Add Sharepoint Foundation to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-41122 | 6.5 | Nov 9 | Microsoft SharePoint Server Spoofing Vulnerability Affected: 2013 |
| CVE-2020-16953 | 6.5 | Oct 16 | <p>An information disclosure vulnerability exists when Microsoft SharePoint Server fails to properly handle objects in memory Affected: 2013 |
| CVE-2020-16948 | 6.5 | Oct 16 | <p>An information disclosure vulnerability exists when Microsoft SharePoint Server fails to properly handle objects in memory Affected: 2010; 2013 |
| CVE-2020-1103 | 6.5 | May 21 | An information disclosure vulnerability exists where certain modes of the search function in Microsoft SharePoint Server are vulnerable to cross-site search attacks (a variant of… Affected: 2013 |
| CVE-2019-1443 | 6.5 | Nov 12 | An information disclosure vulnerability exists in Microsoft SharePoint when an attacker uploads a specially crafted file to the SharePoint Server.An authenticated attacker who… Affected: 2010; 2013 |
| CVE-2019-1330 | 6.5 | Oct 10 | An elevation of privilege vulnerability exists in Microsoft SharePoint, aka 'Microsoft SharePoint Elevation of Privilege Vulnerability' Affected: 2013 |
| CVE-2019-1260 | 6.5 | Sep 11 | An elevation of privilege vulnerability exists in Microsoft SharePoint, aka 'Microsoft SharePoint Elevation of Privilege Vulnerability' Affected: 2010; 2013 |
| CVE-2019-0956 | 6.5 | May 16 | An information disclosure vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka… Affected: 2013 |
| CVE-2020-1482 | 6.3 | Sep 11 | <p>A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server Affected: 2010; 2013 |
| CVE-2020-1106 | 6.1 | May 21 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server Affected: 2013 |
| CVE-2019-0670 | 6.1 | Mar 5 | A spoofing vulnerability exists in Microsoft SharePoint when the application does not properly parse HTTP content, aka 'Microsoft SharePoint Spoofing Vulnerability' Affected: 2013 |
| CVE-2017-0107 | 6.1 | Mar 17 | Microsoft SharePoint Server fails to sanitize crafted web requests, allowing remote attackers to run cross-script in local security context, aka "Microsoft SharePoint XSS… Affected: 2013 |
| CVE-2016-0039 | 6.1 | Feb 10 | Cross-site scripting (XSS) vulnerability in SharePoint Server in Microsoft SharePoint Foundation 2013 SP1 allows remote attackers to inject arbitrary web script or HTML via a… Affected: 2013 |
| CVE-2015-6117 | 6.1 | Jan 13 | Microsoft SharePoint Server 2013 SP1 and SharePoint Foundation 2013 SP1 allow remote authenticated users to bypass intended Access Control Policy restrictions and conduct… Affected: 2013 |
| CVE-2021-43242 | 5.7 | Dec 15 | Microsoft SharePoint Server Spoofing Vulnerability Affected: 2013 |
| CVE-2021-31965 | 5.7 | Jun 8 | Microsoft SharePoint Server Information Disclosure Vulnerability Affected: 2013 |
| CVE-2019-0950 | 5.7 | May 16 | A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft… Affected: 2013 |
| CVE-2019-0949 | 5.7 | May 16 | A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft… Affected: 2013 |
| CVE-2020-1573 | 5.5 | Aug 17 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server Affected: 2010; 2013 |
| CVE-2020-1505 | 5.5 | Aug 17 | An information disclosure vulnerability exists when Microsoft SharePoint Server fails to properly handle objects in memory Affected: 2013 |
| CVE-2020-1575 | 5.4 | Sep 11 | <p>A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server Affected: 2013 |
| CVE-2020-1514 | 5.4 | Sep 11 | <p>A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server Affected: 2013 |
| CVE-2020-1227 | 5.4 | Sep 11 | <p>A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server Affected: 2013 |
| CVE-2020-1580 | 5.4 | Aug 17 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server Affected: 2013 |
| CVE-2020-1501 | 5.4 | Aug 17 | A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server Affected: 2013 |
| CVE-2020-1499 | 5.4 | Aug 17 | A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server Affected: 2010; 2013 |
| CVE-2020-1443 | 5.4 | Jul 14 | A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft… Affected: 2013 |
| CVE-2020-1320 | 5.4 | Jun 9 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka… Affected: 2010; 2013 |
| CVE-2020-1318 | 5.4 | Jun 9 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka… Affected: 2010; 2013 |
| CVE-2020-1298 | 5.4 | Jun 9 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka… Affected: 2010; 2013 |
| CVE-2020-1297 | 5.4 | Jun 9 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka… Affected: 2010; 2013 |
| CVE-2020-1289 | 5.4 | Jun 9 | A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft… Affected: 2010 |
| CVE-2020-1183 | 5.4 | Jun 9 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka… Affected: 2013 |
| CVE-2020-1177 | 5.4 | Jun 9 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka… Affected: 2013 |
| CVE-2020-1107 | 5.4 | May 21 | A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server Affected: 2013 |
| CVE-2020-1104 | 5.4 | May 21 | A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server Affected: 2013 |
| CVE-2020-1101 | 5.4 | May 21 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server Affected: 2013 |
| CVE-2020-1100 | 5.4 | May 21 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server Affected: 2013 |
| CVE-2020-0978 | 5.4 | Apr 15 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka… Affected: 2013 |
| CVE-2020-0976 | 5.4 | Apr 15 | A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft… Affected: 2013 |
| CVE-2020-0975 | 5.4 | Apr 15 | A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft… Affected: 2010; 2013 |
| CVE-2020-0972 | 5.4 | Apr 15 | A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft… Affected: 2010; 2013 |
| CVE-2020-0933 | 5.4 | Apr 15 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka… Affected: 2013 |
| CVE-2020-0925 | 5.4 | Apr 15 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka… Affected: 2010; 2013 |
| CVE-2020-0924 | 5.4 | Apr 15 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka… Affected: 2013 |
| CVE-2020-0923 | 5.4 | Apr 15 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka… Affected: 2013 |
| CVE-2020-0894 | 5.4 | Mar 12 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka… Affected: 2010; 2013 |
| CVE-2020-0891 | 5.4 | Mar 12 | This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server.An authenticated attacker could exploit… Affected: 2010; 2013 |
| CVE-2020-0795 | 5.4 | Mar 12 | This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server.An authenticated attacker could exploit… Affected: 2013 |
| CVE-2019-1329 | 5.4 | Oct 10 | An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka… Affected: 2010; 2013 |