High

DATE	CVE	VULNERABILITY TITLE	RISK
2020-09-11	CVE-2020-1198	Cross-site Scripting vulnerability in Microsoft products <p>A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. network low complexity microsoft CWE-79	7.4
2020-08-17	CVE-2020-1583	Unspecified vulnerability in Microsoft products An information disclosure vulnerability exists when Microsoft Word improperly discloses the contents of its memory. network low complexity microsoft	8.8
2020-08-17	CVE-2020-1495	Unspecified vulnerability in Microsoft products A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. network low complexity microsoft	8.8
2020-04-15	CVE-2020-0971	Unrestricted Upload of File with Dangerous Type vulnerability in Microsoft products A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. network low complexity microsoft CWE-434	8.8
2019-03-05	CVE-2019-0604	Improper Input Validation vulnerability in Microsoft products A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. network low complexity microsoft CWE-20	7.5