Microsoft SharePoint vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
494 matching records
- High8.8CVE-2019-0957 is listed by inventory_critical.Check if you run itEPSS 3.31%May 16, 2019
- Medium5.7CVE-2019-0950 is listed by inventory_critical.Check if you run itEPSS 2.46%May 16, 2019
- Medium5.7CVE-2019-0949 is listed by inventory_critical.Check if you run itEPSS 2.46%May 16, 2019
- Medium5.4CVE-2019-0831 is listed by inventory_critical.Check if you run itEPSS 1.57%Apr 9, 2019
- Medium5.4CVE-2019-0830 is listed by inventory_critical.Check if you run itEPSS 1.57%Apr 9, 2019
- High8.8CVE-2019-0594 is listed by inventory_critical.Check this weekEPSS 12.06%Mar 5, 2019
- Critical9.8Microsoft SharePoint Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.91%Mar 5, 2019
- Medium5.4An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint se…Check if you run itEPSS 1.66%Jan 8, 2019
- Medium5.4CVE-2019-0557 is listed by inventory_critical.Check if you run itEPSS 2.07%Jan 8, 2019
- Medium5.4CVE-2019-0556 is listed by inventory_critical.Check if you run itEPSS 1.64%Jan 8, 2019
- High8.8An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted authentication request to an affected Sh…Check if you run itEPSS 6.13%Dec 12, 2018
- Medium4.3Microsoft SharePoint Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 4.42%Dec 12, 2018
- Medium5.4CVE-2018-8572 is listed by inventory_critical.Check if you run itEPSS 1.62%Nov 14, 2018
- Medium5.4CVE-2018-8568 is listed by inventory_critical.Check if you run itEPSS 2.26%Nov 14, 2018
- Medium5.4CVE-2018-8431 is listed by inventory_critical.Check if you run itEPSS 2.25%Sep 13, 2018
- Medium5.4CVE-2018-8252 is listed by inventory_critical.Check if you run itEPSS 3.00%Jun 14, 2018
- Medium5.4CVE-2018-8168 is listed by inventory_critical.Check if you run itEPSS 2.54%May 9, 2018
- Medium5.4CVE-2018-8155 is listed by inventory_critical.Check if you run itEPSS 2.80%May 9, 2018
- Medium5.4CVE-2018-8149 is listed by inventory_critical.Check if you run itEPSS 2.80%May 9, 2018
- Medium5.4SharePoint Project Server 2013 and SharePoint Enterprise Server 2016 allow an information disclosure vulnerability due to how web requests are handled, aka "Microsoft…Check if you run itEPSS 2.57%Feb 15, 2018
- High8.8CVE-2018-0789 is listed by inventory_critical.Check if you run itEPSS 6.37%Jan 10, 2018
- Medium5.4Microsoft SharePoint Server 2013 Service Pack 1 allows an elevation of privilege vulnerability when it fails to properly sanitize a specially crafted web request to an…Check if you run itEPSS 2.39%Sep 13, 2017
- Medium5.4Microsoft SharePoint Server 2010 Service Pack 2 allows a cross-site scripting (XSS) vulnerability when it does not properly sanitize a specially crafted web request to…Check if you run itEPSS 2.15%Aug 8, 2017
- High8.8Microsoft SharePoint Server allows an elevation of privilege vulnerability due to the way that it sanitizes a specially crafted web request to an affected SharePoint s…Check if you run itEPSS 5.38%Jul 11, 2017
- Medium5.4Microsoft SharePoint Server 2013 SP1 and SharePoint Foundation 2013 SP1 allow remote authenticated users to bypass intended Access Control Policy restrictions and cond…Check if you run itEPSS 5.33%Jan 13, 2016