Vulnerabilities > Microsoft > Sharepoint Foundation

DATE CVE VULNERABILITY TITLE RISK
2020-11-11 CVE-2020-17017 Unspecified vulnerability in Microsoft products
Microsoft SharePoint Information Disclosure Vulnerability
network
high complexity
microsoft
5.3
2020-11-11 CVE-2020-17016 Unspecified vulnerability in Microsoft products
Microsoft SharePoint Server Spoofing Vulnerability
network
low complexity
microsoft
8.0
2020-11-11 CVE-2020-17015 Unspecified vulnerability in Microsoft products
Microsoft SharePoint Server Spoofing Vulnerability
network
low complexity
microsoft
4.3
2020-11-11 CVE-2020-16979 Unspecified vulnerability in Microsoft products
Microsoft SharePoint Information Disclosure Vulnerability
network
high complexity
microsoft
5.3
2020-10-16 CVE-2020-16953 Unspecified vulnerability in Microsoft products
<p>An information disclosure vulnerability exists when Microsoft SharePoint Server fails to properly handle objects in memory.
network
low complexity
microsoft
6.5
2020-10-16 CVE-2020-16952 Origin Validation Error vulnerability in Microsoft products
<p>A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package.
network
low complexity
microsoft CWE-346
8.6
2020-10-16 CVE-2020-16951 Origin Validation Error vulnerability in Microsoft products
<p>A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package.
network
low complexity
microsoft CWE-346
8.6
2020-10-16 CVE-2020-16948 Unspecified vulnerability in Microsoft products
<p>An information disclosure vulnerability exists when Microsoft SharePoint Server fails to properly handle objects in memory.
network
low complexity
microsoft
6.5
2020-10-16 CVE-2020-16946 Cross-site Scripting vulnerability in Microsoft products
<p>A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server.
network
low complexity
microsoft CWE-79
8.7
2020-10-16 CVE-2020-16945 Cross-site Scripting vulnerability in Microsoft products
<p>A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server.
network
low complexity
microsoft CWE-79
8.7