Product:

Sharepoint_server

(Microsoft)
Repositories

Unknown:

This might be proprietary software.
#Vulnerabilities 438
Date Id Summary Products Score Patch Annotated
2019-06-12 CVE-2019-1035 A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. For example, the file could then take actions on behalf of the logged-on user with the same permissions as the current user. To exploit the vulnerability, a user must open a specially crafted file with an affected... Office, Office_365_proplus, Office_online_server, Sharepoint_server 7.8
2019-06-12 CVE-2019-1036 A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint server. The attacker who successfully exploited the vulnerability could then perform cross-site scripting attacks on affected systems and run script in the security context of the current user. The... Project_server, Sharepoint_enterprise_server, Sharepoint_foundation, Sharepoint_server 5.4
2025-05-13 CVE-2025-30384 Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally. Sharepoint_server 7.0
2025-05-13 CVE-2025-30382 Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally. Sharepoint_server 7.8
2025-05-13 CVE-2025-30378 Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally. Sharepoint_server 7.0
2023-05-09 CVE-2023-24955 Microsoft SharePoint Server Remote Code Execution Vulnerability Sharepoint_enterprise_server, Sharepoint_server 7.2
2023-06-14 CVE-2023-29357 Microsoft SharePoint Server Elevation of Privilege Vulnerability Sharepoint_server 9.8
2018-11-14 CVE-2018-8568 An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint Server, Microsoft SharePoint. This CVE ID is unique from CVE-2018-8572. Sharepoint_enterprise_server, Sharepoint_foundation, Sharepoint_server 5.4
2019-01-08 CVE-2019-0556 A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft Office SharePoint XSS Vulnerability." This affects Microsoft SharePoint. This CVE ID is unique from CVE-2019-0557, CVE-2019-0558. Sharepoint_server 5.4
2019-01-08 CVE-2019-0557 A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft Office SharePoint XSS Vulnerability." This affects Microsoft SharePoint. This CVE ID is unique from CVE-2019-0556, CVE-2019-0558. Sharepoint_server 5.4