High

DATE	CVE	VULNERABILITY TITLE	RISK
2020-12-10	CVE-2020-17122	Unspecified vulnerability in Microsoft Office, Office web Apps and Sharepoint Server Microsoft Excel Remote Code Execution Vulnerability local low complexity microsoft	7.8
2020-12-10	CVE-2020-17121	Unspecified vulnerability in Microsoft Sharepoint Foundation and Sharepoint Server Microsoft SharePoint Remote Code Execution Vulnerability network low complexity microsoft	8.8
2020-12-10	CVE-2020-17118	Unspecified vulnerability in Microsoft Sharepoint Foundation and Sharepoint Server Microsoft SharePoint Remote Code Execution Vulnerability network low complexity microsoft	8.1
2020-12-10	CVE-2020-17115	Unspecified vulnerability in Microsoft Sharepoint Foundation and Sharepoint Server Microsoft SharePoint Server Spoofing Vulnerability network low complexity microsoft	8.0
2020-12-10	CVE-2020-17089	Unspecified vulnerability in Microsoft Sharepoint Foundation and Sharepoint Server Microsoft SharePoint Elevation of Privilege Vulnerability network high complexity microsoft	7.1
2020-11-11	CVE-2020-17061	Unspecified vulnerability in Microsoft Sharepoint Foundation and Sharepoint Server Microsoft SharePoint Remote Code Execution Vulnerability network low complexity microsoft	8.8
2020-11-11	CVE-2020-17016	Unspecified vulnerability in Microsoft products Microsoft SharePoint Server Spoofing Vulnerability network low complexity microsoft	8.0
2020-10-16	CVE-2020-16952	Origin Validation Error vulnerability in Microsoft products <p>A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. network low complexity microsoft CWE-346	8.6
2020-10-16	CVE-2020-16951	Origin Validation Error vulnerability in Microsoft products <p>A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. network low complexity microsoft CWE-346	8.6
2020-10-16	CVE-2020-16946	Cross-site Scripting vulnerability in Microsoft products <p>A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. network low complexity microsoft CWE-79	8.7