Product · Microsoft

Microsoft SharePoint Enterprise Server

82 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

82 results · Feed

Medium 5.4

CVE-2020-0926

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a special…

Microsoft Microsoft SharePoint Server Microsoft SharePoint Enterprise Server

Apr 15, 2020
Medium 5.4

CVE-2020-0923

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a special…

Microsoft Microsoft SharePoint Server Microsoft SharePoint Enterprise Server Microsoft SharePoint Foundation

Apr 15, 2020
Medium 5.4

CVE-2020-0924

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a special…

Microsoft Microsoft SharePoint Server Microsoft SharePoint Enterprise Server Microsoft SharePoint Foundation

Apr 15, 2020
Medium 5.4

CVE-2020-0925

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a special…

Microsoft Microsoft SharePoint Server Microsoft SharePoint Enterprise Server Microsoft SharePoint Foundation

Apr 15, 2020
Unscored —

CVE-2020-0920 EPSS 10%

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup…

Microsoft Microsoft SharePoint Server Microsoft SharePoint Enterprise Server Microsoft SharePoint Foundation

Apr 15, 2020
Medium 5.4

CVE-2020-0894

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a special…

Microsoft Microsoft SharePoint Server Microsoft SharePoint Enterprise Server Microsoft SharePoint Foundation

Mar 12, 2020
Unscored —

CVE-2020-0892 EPSS 12%

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in mem…

Microsoft Microsoft Office Microsoft SharePoint Server Microsoft Office Online Server

Mar 12, 2020
Medium 5.4

CVE-2020-0893

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a special…

Microsoft Microsoft SharePoint Server Microsoft SharePoint Enterprise Server

Mar 12, 2020
Medium 5.4

CVE-2020-0891

This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affect…

Microsoft Microsoft SharePoint Server Microsoft SharePoint Enterprise Server Microsoft SharePoint Foundation

Mar 12, 2020
Unscored —

CVE-2020-0850

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in mem…

Microsoft Microsoft Office Microsoft SharePoint Server Microsoft Office Online Server

Mar 12, 2020
Medium 5.4

CVE-2020-0795

This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affect…

Microsoft Microsoft SharePoint Enterprise Server Microsoft SharePoint Foundation Microsoft Business Productivity Servers

Mar 12, 2020
Medium 5.4

CVE-2020-0694

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a special…

Microsoft Microsoft SharePoint Server Microsoft SharePoint Enterprise Server

Feb 11, 2020
Medium 5.4

CVE-2020-0693

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a special…

Microsoft Microsoft SharePoint Server Microsoft SharePoint Enterprise Server

Feb 11, 2020
Unscored —

CVE-2019-1446

An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, ak…

Microsoft Microsoft Office Microsoft Office Online Server Microsoft SharePoint Enterprise Server

Nov 12, 2019
Unscored —

CVE-2019-1443

An information disclosure vulnerability exists in Microsoft SharePoint when an attacker uploads a specially crafted fil…

Microsoft Microsoft SharePoint Server Microsoft SharePoint Enterprise Server Microsoft SharePoint Foundation

Nov 12, 2019
Unscored —

CVE-2019-1328

A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web req…

Microsoft Microsoft SharePoint Enterprise Server Microsoft SharePoint Foundation

Oct 10, 2019
Unscored —

CVE-2019-1331 EPSS 20%

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle obj…

Microsoft Office Online Server Microsoft Office Microsoft SharePoint Enterprise Server

Oct 10, 2019
Unscored —

CVE-2019-1330

An elevation of privilege vulnerability exists in Microsoft SharePoint, aka 'Microsoft SharePoint Elevation of Privileg…

Microsoft Microsoft SharePoint Server Microsoft SharePoint Enterprise Server Microsoft SharePoint Foundation

Oct 10, 2019
Unscored —

CVE-2019-1329

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially …

Microsoft Microsoft SharePoint Enterprise Server Microsoft SharePoint Foundation

Oct 10, 2019
Unscored —

CVE-2019-1070

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a special…

Microsoft Microsoft SharePoint Enterprise Server Microsoft SharePoint Foundation

Oct 10, 2019
Unscored —

CVE-2019-1295

A remote code execution vulnerability exists in Microsoft SharePoint where APIs aren't properly protected from unsafe d…

Microsoft Microsoft SharePoint Server Microsoft SharePoint Enterprise Server Microsoft SharePoint Foundation

Sep 11, 2019
Unscored —

CVE-2019-1296

A remote code execution vulnerability exists in Microsoft SharePoint where APIs aren't properly protected from unsafe d…

Microsoft Microsoft SharePoint Server Microsoft SharePoint Enterprise Server Microsoft SharePoint Foundation

Sep 11, 2019
Unscored —

CVE-2019-1257 EPSS 12%

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup…

Microsoft Microsoft SharePoint Server Microsoft SharePoint Enterprise Server Microsoft SharePoint Foundation

Sep 11, 2019
Unscored —

CVE-2019-1260

An elevation of privilege vulnerability exists in Microsoft SharePoint, aka 'Microsoft SharePoint Elevation of Privileg…

Microsoft Microsoft SharePoint Server Microsoft SharePoint Enterprise Server Microsoft SharePoint Foundation

Sep 11, 2019
Unscored —

CVE-2019-1261

A spoofing vulnerability exists in Microsoft SharePoint when it improperly handles requests to authorize applications, …

Microsoft Microsoft SharePoint Server Microsoft SharePoint Enterprise Server Microsoft SharePoint Foundation

Sep 11, 2019
Medium 5.4

CVE-2019-1134

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a special…

Microsoft Microsoft SharePoint Server Microsoft SharePoint Enterprise Server

Jul 29, 2019
Unscored —

CVE-2019-1006 Public exploit

An authentication bypass vulnerability exists in Windows Communication Foundation (WCF) and Windows Identity Foundation…

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Jul 15, 2019
Unscored —

CVE-2019-0957

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially …

Microsoft Microsoft SharePoint Server Microsoft SharePoint Enterprise Server

May 16, 2019
Unscored —

CVE-2019-0956

An information disclosure vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially …

Microsoft Microsoft SharePoint Enterprise Server Microsoft SharePoint Foundation

May 16, 2019
Unscored —

CVE-2019-0950

A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web req…

Microsoft Microsoft SharePoint Enterprise Server Microsoft SharePoint Foundation

May 16, 2019
Unscored —

CVE-2019-0952

A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filt…

Microsoft Microsoft SharePoint Enterprise Server Microsoft SharePoint Foundation

May 16, 2019
Unscored —

CVE-2019-0949

A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web req…

Microsoft Microsoft SharePoint Enterprise Server Microsoft SharePoint Foundation

May 16, 2019
Medium 5.4

CVE-2019-0831

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a special…

Microsoft Microsoft SharePoint Server Microsoft SharePoint Enterprise Server Microsoft SharePoint Foundation

Apr 9, 2019
Medium 5.4

CVE-2019-0830

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a special…

Microsoft Microsoft SharePoint Server Microsoft SharePoint Enterprise Server Microsoft SharePoint Foundation

Apr 9, 2019
Unscored —

CVE-2019-0778

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a special…

Microsoft Microsoft SharePoint Enterprise Server Microsoft SharePoint Foundation

Apr 9, 2019
Unscored —

CVE-2019-0670

A spoofing vulnerability exists in Microsoft SharePoint when the application does not properly parse HTTP content, aka …

Microsoft Microsoft SharePoint Enterprise Server Microsoft SharePoint Foundation

Mar 6, 2019
Unscored —

CVE-2019-0594 EPSS 12%

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup…

Microsoft Microsoft SharePoint Server Microsoft SharePoint Enterprise Server Microsoft SharePoint Foundation

Mar 6, 2019
Unscored —

CVE-2019-0668

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially …

Microsoft Microsoft SharePoint Enterprise Server

Mar 6, 2019
Critical 9.8

CVE-2019-0604 Exploited · Ransomware Public exploit EPSS 100%

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup…

Microsoft Microsoft SharePoint Server Microsoft SharePoint Enterprise Server Microsoft SharePoint Foundation

Mar 6, 2019
KEV Nov 3, 2021
Unscored —

CVE-2017-11777

Microsoft SharePoint Enterprise Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an attacker to ex…

Microsoft Microsoft SharePoint Enterprise Server

Oct 13, 2017