Vulnerabilities > Microsoft > Sharepoint Enterprise Server > High

DATE CVE VULNERABILITY TITLE RISK
2021-01-12 CVE-2021-1719 Improper Privilege Management vulnerability in Microsoft Sharepoint Enterprise Server and Sharepoint Server
Microsoft SharePoint Elevation of Privilege Vulnerability
network
low complexity
microsoft CWE-269
8.0
2021-01-12 CVE-2021-1716 Unspecified vulnerability in Microsoft products
Microsoft Word Remote Code Execution Vulnerability
local
low complexity
microsoft
7.8
2021-01-12 CVE-2021-1715 Out-of-bounds Write vulnerability in Microsoft products
Microsoft Word Remote Code Execution Vulnerability
local
low complexity
microsoft CWE-787
7.8
2021-01-12 CVE-2021-1714 Unspecified vulnerability in Microsoft products
Microsoft Excel Remote Code Execution Vulnerability
local
low complexity
microsoft
7.8
2021-01-12 CVE-2021-1712 Improper Privilege Management vulnerability in Microsoft products
Microsoft SharePoint Elevation of Privilege Vulnerability
network
low complexity
microsoft CWE-269
8.0
2021-01-12 CVE-2021-1707 Unspecified vulnerability in Microsoft products
Microsoft SharePoint Server Remote Code Execution Vulnerability
network
low complexity
microsoft
8.8
2020-11-11 CVE-2020-17016 Unspecified vulnerability in Microsoft products
Microsoft SharePoint Server Spoofing Vulnerability
network
low complexity
microsoft
8.0
2020-10-16 CVE-2020-16952 Origin Validation Error vulnerability in Microsoft products
<p>A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package.
network
low complexity
microsoft CWE-346
8.6
2020-10-16 CVE-2020-16951 Origin Validation Error vulnerability in Microsoft products
<p>A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package.
network
low complexity
microsoft CWE-346
8.6
2020-10-16 CVE-2020-16946 Cross-site Scripting vulnerability in Microsoft products
<p>A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server.
network
low complexity
microsoft CWE-79
8.7