Microsoft SharePoint vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
494 matching records
- High8.8An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted authentication request to an affected Sh…Check if you run itEPSS 3.13%Jun 9, 2020
- Medium5.4CVE-2020-1177 is listed by inventory_critical.Check if you run itEPSS 1.49%Jun 9, 2020
- Medium5.4CVE-2020-1148 is listed by inventory_critical.Check if you run itEPSS 1.40%Jun 9, 2020
- Medium5.4CVE-2020-1107 is listed by A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected S…Check if you run itEPSS 1.50%May 21, 2020
- Medium6.1CVE-2020-1106 is listed by A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques…Check if you run itEPSS 4.02%May 21, 2020
- Medium5.4CVE-2020-1105 is listed by A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected S…Check if you run itEPSS 1.57%May 21, 2020
- Medium5.4CVE-2020-1104 is listed by A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected S…Check if you run itEPSS 1.57%May 21, 2020
- Medium6.5An information disclosure vulnerability exists where certain modes of the search function in Microsoft SharePoint Server are vulnerable to cross-site search attacks (a…Check if you run itEPSS 2.21%May 21, 2020
- High8.8CVE-2020-1102 is listed by A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application pa…Check if you run itEPSS 5.22%May 21, 2020
- Medium5.4CVE-2020-1101 is listed by A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques…Check if you run itEPSS 1.73%May 21, 2020
- Medium5.4CVE-2020-1100 is listed by A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques…Check if you run itEPSS 1.73%May 21, 2020
- Medium5.4CVE-2020-1099 is listed by A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques…Check if you run itEPSS 1.73%May 21, 2020
- High8.8A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net web controls.Check if you run itEPSS 4.01%May 21, 2020
- High8.8CVE-2020-1024 is listed by A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application pa…Check if you run itEPSS 3.75%May 21, 2020
- High8.8CVE-2020-1023 is listed by A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application pa…Check if you run itEPSS 3.75%May 21, 2020
- Medium5.4CVE-2020-0978 is listed by inventory_critical.Check if you run itEPSS 1.52%Apr 15, 2020
- Medium5.4CVE-2020-0977 is listed by inventory_critical.Check if you run itEPSS 1.63%Apr 15, 2020
- Medium5.4CVE-2020-0975 is listed by inventory_critical.Check if you run itEPSS 1.63%Apr 15, 2020
- High8.8CVE-2020-0974 is listed by inventory_critical.Check this weekEPSS 10.70%Apr 15, 2020
- Medium5.4CVE-2020-0973 is listed by inventory_critical.Check if you run itEPSS 1.52%Apr 15, 2020
- Medium5.4CVE-2020-0972 is listed by inventory_critical.Check if you run itEPSS 1.63%Apr 15, 2020
- High8.8CVE-2020-0971 is listed by inventory_critical.Check this weekEPSS 13.18%Apr 15, 2020
- Medium5.4CVE-2020-0933 is listed by inventory_critical.Check if you run itEPSS 1.52%Apr 15, 2020
- High8.8CVE-2020-0932 is listed by inventory_critical.Check this weekEPSS 35.53%Apr 15, 2020
- Medium5.4CVE-2020-0930 is listed by inventory_critical.Check if you run itEPSS 1.52%Apr 15, 2020