Product:

Sharepoint_foundation

(Microsoft)
Repositories

Unknown:

This might be proprietary software.
#Vulnerabilities 226
Date Id Summary Products Score Patch Annotated
2019-06-12 CVE-2019-1031 A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint server. The attacker who successfully exploited the vulnerability could then perform cross-site scripting attacks on affected systems and run script in the security context of the current user. The... Project_server, Sharepoint_enterprise_server, Sharepoint_foundation, Sharepoint_server 5.4
2019-06-12 CVE-2019-1033 A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint server. The attacker who successfully exploited the vulnerability could then perform cross-site scripting attacks on affected systems and run script in the security context of the current user. The... Project_server, Sharepoint_enterprise_server, Sharepoint_foundation, Sharepoint_server 5.4
2019-06-12 CVE-2019-1036 A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint server. The attacker who successfully exploited the vulnerability could then perform cross-site scripting attacks on affected systems and run script in the security context of the current user. The... Project_server, Sharepoint_enterprise_server, Sharepoint_foundation, Sharepoint_server 5.4
2018-11-14 CVE-2018-8568 An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint Server, Microsoft SharePoint. This CVE ID is unique from CVE-2018-8572. Sharepoint_enterprise_server, Sharepoint_foundation, Sharepoint_server 5.4
2019-04-09 CVE-2019-0830 A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2019-0831. Sharepoint_enterprise_server, Sharepoint_foundation, Sharepoint_server 5.4
2019-04-09 CVE-2019-0831 A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2019-0830. Sharepoint_enterprise_server, Sharepoint_foundation, Sharepoint_server 5.4
2019-05-16 CVE-2019-0963 A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. Sharepoint_foundation 5.4
2020-03-12 CVE-2020-0795 This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server.An authenticated attacker could exploit this vulnerability by sending a specially crafted request to an affected SharePoint server, aka 'Microsoft SharePoint Reflective XSS Vulnerability'. This CVE ID is unique from CVE-2020-0891. Business_productivity_servers, Sharepoint_enterprise_server, Sharepoint_foundation 5.4
2020-03-12 CVE-2020-0891 This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server.An authenticated attacker could exploit this vulnerability by sending a specially crafted request to an affected SharePoint server, aka 'Microsoft SharePoint Reflective XSS Vulnerability'. This CVE ID is unique from CVE-2020-0795. Sharepoint_enterprise_server, Sharepoint_foundation, Sharepoint_server 5.4
2020-03-12 CVE-2020-0894 A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0893. Sharepoint_enterprise_server, Sharepoint_foundation, Sharepoint_server 5.4