Vulnerabilities > Microsoft > Sharepoint Enterprise Server > High

DATE CVE VULNERABILITY TITLE RISK
2020-10-16 CVE-2020-16952 Origin Validation Error vulnerability in Microsoft products
<p>A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package.
network
low complexity
microsoft CWE-346
8.6
2020-10-16 CVE-2020-16951 Origin Validation Error vulnerability in Microsoft products
<p>A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package.
network
low complexity
microsoft CWE-346
8.6
2020-10-16 CVE-2020-16946 Cross-site Scripting vulnerability in Microsoft products
<p>A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server.
network
low complexity
microsoft CWE-79
8.7
2020-10-16 CVE-2020-16945 Cross-site Scripting vulnerability in Microsoft products
<p>A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server.
network
low complexity
microsoft CWE-79
8.7
2020-10-16 CVE-2020-16944 Cross-site Scripting vulnerability in Microsoft products
<p>This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server.</p> <p>An authenticated attacker could exploit this vulnerability by sending a specially crafted request to an affected SharePoint server.
network
low complexity
microsoft CWE-79
8.7
2020-10-16 CVE-2020-16929 Use After Free vulnerability in Microsoft products
<p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory.
local
low complexity
microsoft CWE-416
7.8
2020-09-11 CVE-2020-1576 Download of Code Without Integrity Check vulnerability in Microsoft products
<p>A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package.
network
high complexity
microsoft CWE-494
8.5
2020-09-11 CVE-2020-1460 Unspecified vulnerability in Microsoft products
<p>A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net web controls.
network
low complexity
microsoft
8.6
2020-09-11 CVE-2020-1453 Download of Code Without Integrity Check vulnerability in Microsoft products
<p>A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package.
network
low complexity
microsoft CWE-494
8.6
2020-09-11 CVE-2020-1452 Download of Code Without Integrity Check vulnerability in Microsoft products
<p>A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package.
network
low complexity
microsoft CWE-494
8.6