Business Productivity Servers

DATE	CVE	VULNERABILITY TITLE	RISK
2021-03-11	CVE-2021-27076	Unspecified vulnerability in Microsoft products Microsoft SharePoint Server Remote Code Execution Vulnerability network low complexity microsoft	8.8
2020-04-15	CVE-2020-0931	Unrestricted Upload of File with Dangerous Type vulnerability in Microsoft products A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. network low complexity microsoft CWE-434	8.8
2020-03-12	CVE-2020-0795	Cross-site Scripting vulnerability in Microsoft products This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server.An authenticated attacker could exploit this vulnerability by sending a specially crafted request to an affected SharePoint server, aka 'Microsoft SharePoint Reflective XSS Vulnerability'. network low complexity microsoft CWE-79	5.4
2019-01-08	CVE-2019-0558	Cross-site Scripting vulnerability in Microsoft Business Productivity Servers and Sharepoint Server A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft Office SharePoint XSS Vulnerability." This affects Microsoft SharePoint Server, Microsoft SharePoint, Microsoft Business Productivity Servers. network low complexity microsoft CWE-79	5.4
2017-07-11	CVE-2017-0243	Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Microsoft products Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Microsoft Office Remote Code Execution Vulnerability". local low complexity microsoft CWE-119	7.8