Microsoft Microsoft Sharepoint Foundation
65 CVEs affecting Microsoft Microsoft Sharepoint Foundation. Latest disclosed: 2020-07-14. Critical: 1, High: 21.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-0604 | Critical | 9.8 | 2019-03-05 | A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microso… |
CVE-2020-1439 | High | 8.8 | 2020-07-14 | A remote code execution vulnerability exists in PerformancePoint Services for SharePoint Server when the software fails to check the source markup of XML file… |
CVE-2020-1181 | High | 8.8 | 2020-06-09 | A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net web controls, aka 'Mic… |
CVE-2020-1069 | High | 8.8 | 2020-05-21 | A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net web controls, aka 'Mic… |
CVE-2020-1024 | High | 8.8 | 2020-05-21 | A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microso… |
CVE-2020-1023 | High | 8.8 | 2020-05-21 | A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microso… |
CVE-2020-0971 | High | 8.8 | 2020-04-15 | A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microso… |
CVE-2020-0932 | High | 8.8 | 2020-04-15 | A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microso… |
CVE-2020-0931 | High | 8.8 | 2020-04-15 | A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microso… |
CVE-2020-0929 | High | 8.8 | 2020-04-15 | A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microso… |
CVE-2020-0920 | High | 8.8 | 2020-04-15 | A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microso… |
CVE-2020-0850 | High | 8.8 | 2020-03-12 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Exe… |
CVE-2019-1296 | High | 8.8 | 2019-09-11 | A remote code execution vulnerability exists in Microsoft SharePoint where APIs aren't properly protected from unsafe data input, aka 'Microsoft SharePoint Rem… |
CVE-2019-1295 | High | 8.8 | 2019-09-11 | A remote code execution vulnerability exists in Microsoft SharePoint where APIs aren't properly protected from unsafe data input, aka 'Microsoft SharePoint Rem… |
CVE-2019-1261 | High | 8.8 | 2019-09-11 | A spoofing vulnerability exists in Microsoft SharePoint when it improperly handles requests to authorize applications, resulting in cross-site request forgery… |
CVE-2019-1259 | High | 8.8 | 2019-09-11 | A spoofing vulnerability exists in Microsoft SharePoint when it improperly handles requests to authorize applications, resulting in cross-site request forgery… |
CVE-2019-1257 | High | 8.8 | 2019-09-11 | A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microso… |
CVE-2019-0958 | High | 8.8 | 2019-05-16 | An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected Share… |
CVE-2019-0952 | High | 8.8 | 2019-05-16 | A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net web controls, aka 'Mic… |
CVE-2019-0594 | High | 8.8 | 2019-03-05 | A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microso… |