Microsoft SharePoint vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
494 matching records
- High8.6CVE-2020-1200 is listed by A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application pa…Check if you run itEPSS 2.07%Sep 11, 2020
- High7.4CVE-2020-1198 is listed by A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques…Check if you run itEPSS 2.67%Sep 11, 2020
- Medium5.4CVE-2020-1580 is listed by A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques…Check if you run itEPSS 1.59%Aug 17, 2020
- Medium5.5CVE-2020-1573 is listed by A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques…Check if you run itEPSS 1.88%Aug 17, 2020
- Medium5.5An information disclosure vulnerability exists when Microsoft SharePoint Server fails to properly handle objects in memory.Check if you run itEPSS 1.33%Aug 17, 2020
- Medium5.4CVE-2020-1501 is listed by A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected S…Check if you run itEPSS 1.75%Aug 17, 2020
- Medium5.4CVE-2020-1500 is listed by A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected S…Check if you run itEPSS 1.84%Aug 17, 2020
- Medium5.4CVE-2020-1499 is listed by A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected S…Check if you run itEPSS 1.84%Aug 17, 2020
- Medium5.4CVE-2020-1456 is listed by inventory_critical.Check if you run itEPSS 2.23%Jul 14, 2020
- Medium5.4This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server.An authenticated attacker c…Check if you run itEPSS 1.57%Jul 14, 2020
- Medium5.4CVE-2020-1451 is listed by inventory_critical.Check if you run itEPSS 1.60%Jul 14, 2020
- Medium5.4CVE-2020-1450 is listed by inventory_critical.Check if you run itEPSS 1.60%Jul 14, 2020
- Medium4.3A remote code execution vulnerability exists in the way Microsoft SharePoint software parses specially crafted email messages, aka 'Microsoft SharePoint Remote Code Ex…Check if you run itEPSS 9.05%Jul 14, 2020
- Medium5.4A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Micr…Check if you run itEPSS 1.65%Jul 14, 2020
- High8.8A remote code execution vulnerability exists in PerformancePoint Services for SharePoint Server when the software fails to check the source markup of XML file input, a…Check this weekEPSS 20.27%Jul 14, 2020
- Critical9.8An elevation of privilege vulnerability exists when Microsoft SharePoint Server and Skype for Business Server improperly handle OAuth token validation.Check if you run itEPSS 5.85%Jul 14, 2020
- High7.8Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution VulnerabilityPatch nowKEVEPSS 95.80%Jul 14, 2020
- Medium6.1An open redirect vulnerability exists in Microsoft SharePoint that could lead to spoofing.To exploit the vulnerability, an attacker could send a link that has a specia…Check if you run itEPSS 2.19%Jun 9, 2020
- Medium5.4CVE-2020-1320 is listed by inventory_critical.Check if you run itEPSS 1.53%Jun 9, 2020
- Medium5.4CVE-2020-1318 is listed by inventory_critical.Check if you run itEPSS 1.49%Jun 9, 2020
- Medium5.4CVE-2020-1298 is listed by inventory_critical.Check if you run itEPSS 1.53%Jun 9, 2020
- Medium5.4CVE-2020-1297 is listed by inventory_critical.Check if you run itEPSS 1.49%Jun 9, 2020
- High8.8CVE-2020-1295 is listed by An elevation of privilege vulnerability exists in Microsoft SharePoint, aka 'Microsoft SharePoint Elevation of Privilege Vulnerability'..Check if you run itEPSS 2.96%Jun 9, 2020
- Medium5.4CVE-2020-1183 is listed by inventory_critical.Check if you run itEPSS 1.49%Jun 9, 2020
- High8.8A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net web controls, aka 'Microsoft S…Check this weekEPSS 69.30%Jun 9, 2020