Microsoft SharePoint vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
494 matching records
- Medium6.1Microsoft SharePoint Server 2013 SP1 and SharePoint Foundation 2013 SP1 allow remote authenticated users to bypass intended Access Control Policy restrictions and cond…Check if you run itEPSS 6.87%Jan 13, 2016
- Low3.5Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2013 SP1 and SharePoint Foundation 2013 SP1 allows remote authenticated users to inject arbitra…Check if you run itEPSS 9.06%Oct 14, 2015
- Medium4.3The InfoPath Forms Services component in Microsoft SharePoint Server 2007 SP3 and 2010 SP2 misparses DTDs, which allows remote attackers to read arbitrary files via an…Check this weekEPSS 15.25%Oct 14, 2015
- Medium6.0Microsoft SharePoint Server 2007 SP3, SharePoint Foundation 2010 SP2, SharePoint Server 2010 SP2, and SharePoint Foundation 2013 SP1 allow remote authenticated users t…Check this weekEPSS 12.05%May 13, 2015
- Medium4.3Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Foundation 2013 SP1 and SharePoint Server 2013 SP1 allows remote attackers to inject arbitrary web scr…Check if you run itEPSS 8.80%Apr 14, 2015
- Low3.5Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Foundation 2013 Gold and SP1 and SharePoint Server 2013 Gold and SP1 allows remote authenticated users…Check if you run itEPSS 6.88%Mar 11, 2015
- Low3.5Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Foundation 2010 SP2, SharePoint Server 2010 SP2, SharePoint Foundation 2013 Gold and SP1, and SharePoi…Check if you run itEPSS 7.66%Mar 11, 2015
- Critical9.3Use-after-free vulnerability in Microsoft Office 2007 SP3, Excel 2007 SP3, PowerPoint 2007 SP3, Word 2007 SP3, Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Wo…Check this weekEPSS 18.75%Mar 11, 2015
- Critical9.3Microsoft SharePoint Server 2013 Gold and SP1 and SharePoint Foundation 2013 Gold and SP1 allow remote authenticated users to gain privileges via a Trojan horse app th…Check this weekEPSS 16.15%Aug 12, 2014
- Critical9.0Microsoft Windows SharePoint Services 3.0 SP3; SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013 Gold and SP1; SharePoint Foundation 2010 SP1 and SP2 and 2013 Gol…Check this weekEPSS 14.21%May 14, 2014
- Medium6.8Microsoft SharePoint Server 2007 SP3 and 2010 SP1 and SP2 allows remote attackers to conduct clickjacking attacks via a crafted web page, aka "Parameter Injection Vulnerability."Check this weekEPSS 29.86%Oct 9, 2013
- Critical9.3Microsoft Word Automation Services in SharePoint Server 2010 SP1 and SP2, Word Web App 2010 SP1 and SP2 in Office Web Apps 2010, Word 2003 SP3, Word 2007 SP3, Word 201…Check this weekEPSS 21.03%Sep 11, 2013
- Critical9.3CVE-2013-3847 is listed by inventory_critical.Check this weekEPSS 20.97%Sep 11, 2013
- Medium4.3Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 SP1 and SP2 and 2013 allows remote attackers to inject arbitrary web script or HTML via a…Check this weekEPSS 65.81%Sep 11, 2013
- Medium4.3Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013 allows remote attackers to inject arbitrary web script or…Check this weekEPSS 22.26%Sep 11, 2013
- Critical10.0The default configuration of Microsoft SharePoint Portal Server 2003 SP3, SharePoint Server 2007 SP3 and 2010 SP1 and SP2, and Office Web Apps 2010 does not set the En…Check this weekEPSS 30.20%Sep 11, 2013
- Critical9.3Microsoft SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013; Office Web Apps 2010; Excel 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Office for Mac 2…Check this weekEPSS 28.87%Sep 11, 2013
- Medium5.0Microsoft SharePoint Portal Server 2003 SP3 and SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013 do not properly process unassigned workflows, which allows remot…Check this weekEPSS 76.33%Sep 11, 2013
- Low3.5Microsoft SharePoint Server 2013, in certain configurations involving legacy My Sites, does not properly establish default access controls for a SharePoint list, which…Check this weekEPSS 16.99%Apr 9, 2013
- Medium5.0Microsoft OneNote 2010 SP1 does not properly determine buffer sizes during memory allocation, which allows remote attackers to obtain sensitive information via a craft…Check this weekEPSS 23.97%Mar 13, 2013
- High7.8Buffer overflow in Microsoft SharePoint Server 2010 SP1 and SharePoint Foundation 2010 SP1 allows remote attackers to cause a denial of service (W3WP process crash and…Check this weekEPSS 33.98%Mar 13, 2013
- High7.5Directory traversal vulnerability in Microsoft SharePoint Server 2010 SP1 and SharePoint Foundation 2010 SP1 allows remote attackers to bypass intended read restrictio…Check this weekEPSS 21.35%Mar 13, 2013
- Medium4.3Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 SP1 allows remote attackers to inject arbitrary web script or HTML via crafted content, le…Check this weekEPSS 14.33%Mar 13, 2013
- High7.5Microsoft SharePoint Server 2010 SP1 and SharePoint Foundation 2010 SP1 allow remote attackers to bypass intended read restrictions for content, and hijack user accoun…Check this weekEPSS 19.29%Mar 13, 2013
- Medium4.3Microsoft groove_server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 34.28%Oct 9, 2012