Vulnerabilities > Microsoft > Business Productivity Servers > Low

DATE CVE VULNERABILITY TITLE RISK
2020-03-12 CVE-2020-0795 Cross-site Scripting vulnerability in Microsoft products
This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server.An authenticated attacker could exploit this vulnerability by sending a specially crafted request to an affected SharePoint server, aka 'Microsoft SharePoint Reflective XSS Vulnerability'.
network
microsoft CWE-79
3.5
2019-01-08 CVE-2019-0558 Cross-site Scripting vulnerability in Microsoft Business Productivity Servers and Sharepoint Server
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft Office SharePoint XSS Vulnerability." This affects Microsoft SharePoint Server, Microsoft SharePoint, Microsoft Business Productivity Servers.
network
microsoft CWE-79
3.5