Microsoft SharePoint Foundation at a glance
1 of the exploited vulnerabilities are known to be used by ransomware (CISA).
Show as table
| Month | Vulnerabilities | Critical |
|---|---|---|
| Nov 2026 | 0 | 0 |
| Oct 2026 | 0 | 0 |
| Sep 2026 | 0 | 0 |
| Aug 2026 | 0 | 0 |
| Jul 2026 | 0 | 0 |
| Jun 2026 | 0 | 0 |
| May 2026 | 0 | 0 |
| Apr 2026 | 0 | 0 |
| Mar 2026 | 0 | 0 |
| Feb 2026 | 0 | 0 |
| Jan 2026 | 0 | 0 |
| Dec 2025 | 0 | 0 |
| Nov 2025 | 0 | 0 |
| Oct 2025 | 0 | 0 |
| Sep 2025 | 0 | 0 |
| Aug 2025 | 0 | 0 |
| Jul 2025 | 0 | 0 |
| Jun 2025 | 0 | 0 |
| May 2025 | 0 | 0 |
| Apr 2025 | 0 | 0 |
| Mar 2025 | 0 | 0 |
| Feb 2025 | 0 | 0 |
| Jan 2025 | 0 | 0 |
| Dec 2024 | 0 | 0 |
Most common weaknesses
56 results · Feed
-
Unscored —
A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web req…
-
Unscored —
A remote code execution vulnerability exists in the way Microsoft SharePoint software parses specially crafted email me…
-
Unscored —CVE-2020-1439 EPSS 20%
A remote code execution vulnerability exists in PerformancePoint Services for SharePoint Server when the software fails…
-
Unscored —
An open redirect vulnerability exists in Microsoft SharePoint that could lead to spoofing.To exploit the vulnerability,…
-
Medium 5.4
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a special…
-
Medium 5.4
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a special…
-
Medium 5.4
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a special…
-
Medium 5.4
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a special…
-
Unscored —
A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web req…
-
Unscored —CVE-2020-1181 EPSS 69%
A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filt…
-
Medium 5.4
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a special…
-
Medium 5.4
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a special…
-
Medium 5.4
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a special…
-
Unscored —
A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web req…
-
Unscored —
A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web req…
-
Unscored —CVE-2020-0971 EPSS 13%
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup…
-
Unscored —
A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web req…
-
Medium 5.4
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a special…
-
Unscored —CVE-2020-0932 EPSS 36%
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup…
-
Unscored —CVE-2020-0931 EPSS 11%
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup…
-
Unscored —CVE-2020-0929 EPSS 11%
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup…
-
Medium 5.4
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a special…
-
Medium 5.4
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a special…
-
Medium 5.4
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a special…
-
Unscored —CVE-2020-0920 EPSS 10%
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup…
-
Medium 5.4
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a special…
-
Unscored —CVE-2020-0892 EPSS 12%
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in mem…
-
Medium 5.4
This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affect…
-
Unscored —
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in mem…
-
Medium 5.4
This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affect…
-
Unscored —
An information disclosure vulnerability exists in Microsoft SharePoint when an attacker uploads a specially crafted fil…
-
Unscored —
A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web req…
-
Unscored —
An elevation of privilege vulnerability exists in Microsoft SharePoint, aka 'Microsoft SharePoint Elevation of Privileg…
-
Unscored —
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially …
-
Unscored —
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a special…
-
Unscored —
A remote code execution vulnerability exists in Microsoft SharePoint where APIs aren't properly protected from unsafe d…
-
Unscored —
A remote code execution vulnerability exists in Microsoft SharePoint where APIs aren't properly protected from unsafe d…
-
Unscored —
A spoofing vulnerability exists in Microsoft SharePoint when it improperly handles requests to authorize applications, …
-
Unscored —CVE-2019-1257 EPSS 12%
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup…
-
Unscored —
An elevation of privilege vulnerability exists in Microsoft SharePoint, aka 'Microsoft SharePoint Elevation of Privileg…