Sharepoint Foundation vulnerabilities | LiveThreat CVE Feed

Product

Sharepoint Foundation

by Microsoft · last CVE Apr 11, 2023

On CISA KEVExploited in the wildRansomware-linked

226

CVEs

On KEV

9.9

Max CVSS

New 30D

Vulnerabilities226 In the news0 Timeline

Severity mix

Critical 5High 93Medium 89Low 1

Severity

All severities226 Critical5 High93 Medium89 Low1

Exploitation

On CISA KEV1 Exploited in the wild1

Watch

Add Sharepoint Foundation to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2019-0594	8.8	12%	Mar 5	A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote… Affected: 2013
CVE-2018-0790	8.8	5%	Jan 10	Microsoft SharePoint Foundation 2010, Microsoft SharePoint Server 2013 and Microsoft SharePoint Server 2016 allow an elevation of privilege vulnerability due to the way web… Affected: 2010
CVE-2020-16946	8.7	2%	Oct 16	<p>A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server Affected: 2010
CVE-2020-16945	8.7	2%	Oct 16	<p>A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server Affected: 2013
CVE-2020-16944	8.7	2%	Oct 16	<p>This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server.</p> <p>An authenticated attacker… Affected: 2013
CVE-2020-16952	8.6	71%	Oct 16	<p>A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package Affected: 2013
CVE-2020-16951	8.6	1%	Oct 16	<p>A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package Affected: 2013
CVE-2020-1460	8.6	4%	Sep 11	<p>A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net web controls Affected: 2010; 2013
CVE-2020-1453	8.6	2%	Sep 11	<p>A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package Affected: 2010; 2013
CVE-2020-1452	8.6	2%	Sep 11	<p>A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package Affected: 2010; 2013
CVE-2020-1200	8.6	2%	Sep 11	<p>A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package Affected: 2010; 2013
CVE-2020-1576	8.5	2%	Sep 11	<p>A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package Affected: 2010; 2013
CVE-2023-28288	8.1	6%	Apr 11	Microsoft SharePoint Server Spoofing Vulnerability Affected: 2013
CVE-2021-41344	8.1	6%	Oct 13	Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 2013
CVE-2021-40487	8.1	48%	Oct 13	Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 2013
CVE-2021-34520	8.1	4%	Jul 14	Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 2013
CVE-2020-17118	8.1	4%	Dec 10	Microsoft SharePoint Remote Code Execution Vulnerability Affected: 2010; 2013
CVE-2018-8284	8.1	46%	Jul 11	A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka ".NET Framework Remote Code Injection Vulnerability." This… Affected: 2010; 2013
CVE-2022-24472	8.0	2%	Apr 15	Microsoft SharePoint Server Spoofing Vulnerability Affected: 2013
CVE-2022-21987	8.0	2%	Feb 9	Microsoft SharePoint Server Spoofing Vulnerability Affected: 2013
CVE-2021-1726	8.0	2%	Feb 25	Microsoft SharePoint Server Spoofing Vulnerability Affected: 2010; 2013
CVE-2021-1718	8.0	3%	Jan 12	Microsoft SharePoint Server Tampering Vulnerability Affected: 2010
CVE-2021-1712	8.0	2%	Jan 12	Microsoft SharePoint Elevation of Privilege Vulnerability Affected: 2013
CVE-2020-17115	8.0	3%	Dec 10	Microsoft SharePoint Server Spoofing Vulnerability Affected: 2010; 2013
CVE-2020-17016	8.0	3%	Nov 11	Microsoft SharePoint Server Spoofing Vulnerability Affected: 2010
CVE-2020-0892	7.8	12%	Mar 12	A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution… Affected: 2013
CVE-2017-0281	7.8	16%	May 12	Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2016, Office Online Server 2016, Office Web Apps 2010 SP2,Office Web Apps 2013 SP1, Project Server 2013 SP1,… Affected: 2013
CVE-2016-3357	7.8	55%	Sep 14	Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office 2016, Word for Mac 2011, Word 2016 for Mac, Word Viewer, Word Automation Services on… Affected: 2010; 2013
CVE-2016-0136	7.8	20%	Apr 12	Microsoft Excel 2007 SP3, Excel 2010 SP2, Office Compatibility Pack SP3, Excel Services on SharePoint Server 2007 SP3, and Excel Services on SharePoint Server 2010 SP2 allow… Affected: 2010
CVE-2016-0054	7.8	16%	Feb 10	Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, Office Compatibility Pack SP3, Excel Viewer, Excel… Affected: 2010
CVE-2021-40484	7.6	1%	Oct 13	Microsoft SharePoint Server Spoofing Vulnerability Affected: 2013
CVE-2021-38652	7.6	1%	Sep 15	Microsoft SharePoint Server Spoofing Vulnerability Affected: 2013
CVE-2021-38651	7.6	1%	Sep 15	Microsoft SharePoint Server Spoofing Vulnerability Affected: 2013
CVE-2021-31964	7.6	2%	Jun 8	Microsoft SharePoint Server Spoofing Vulnerability Affected: 2013
CVE-2021-31950	7.6	5%	Jun 8	Microsoft SharePoint Server Spoofing Vulnerability Affected: 2013
CVE-2021-31948	7.6	1%	Jun 8	Microsoft SharePoint Server Spoofing Vulnerability Affected: 2013
CVE-2021-28478	7.6	2%	May 11	Microsoft SharePoint Server Spoofing Vulnerability Affected: 2013
CVE-2019-1006	7.5	6%	Jul 15	An authentication bypass vulnerability exists in Windows Communication Foundation (WCF) and Windows Identity Foundation (WIF), allowing signing of SAML tokens with arbitrary… Affected: 2010; 2013
CVE-2020-1345	7.4	3%	Sep 11	<p>A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server Affected: 2010; 2013
CVE-2020-1198	7.4	3%	Sep 11	<p>A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server Affected: 2010; 2013
CVE-2021-42294	7.2	2%	Dec 15	Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 2013
CVE-2021-31966	7.2	5%	Jun 8	Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 2013
CVE-2021-34467	7.1	7%	Jul 16	Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 2013
CVE-2021-34468	7.1	2%	Jul 14	Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 2013
CVE-2021-31963	7.1	2%	Jun 8	Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 2013
CVE-2021-26420	7.1	3%	Jun 8	Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 2013
CVE-2021-31172	7.1	2%	May 11	Microsoft SharePoint Server Spoofing Vulnerability Affected: 2013
CVE-2020-17089	7.1	3%	Dec 10	Microsoft SharePoint Elevation of Privilege Vulnerability Affected: 2010; 2013
CVE-2022-41122	6.5	2%	Nov 9	Microsoft SharePoint Server Spoofing Vulnerability Affected: 2013
CVE-2020-16953	6.5	4%	Oct 16	<p>An information disclosure vulnerability exists when Microsoft SharePoint Server fails to properly handle objects in memory Affected: 2013