CVE-2020-1297

Technical details for CVE-2020-1297 are not publicly available in the provided connected documents. Monitor for updates and new disclosures that specify affected products, versions, impact, and remediation.

CVE-2020-17016

CVE-2020-17016 is described in the CVE entry as a Microsoft SharePoint Server spoofing vulnerability. Connected Nessus plugins indicate that multiple SharePoint Server versions (2010, 2013, 2016, 2019) are affected and that November 2020 security updates address this issue among others; however, ...

CVE-2021-1712

CVE-2021-1712 is described in the provided documents as a Microsoft SharePoint elevation-of-privilege vulnerability. The NVD entry provides a CVSS v3.1 base score of 8.0 (NETWORK, LOW attack complexity, Privileges Required: LOW, User Interaction: REQUIRED, with HIGH confidentiality/integrity/avai...

CVE-2021-43242

CVE-2021-43242 is a Microsoft SharePoint Server spoofing vulnerability. Connected sources indicate the issue affects multiple SharePoint Server editions (2013/2016/2019 and SharePoint Server Subscription Edition) and is described as a session spoofing flaw that can allow an attacker to perform ac...

CVE-2020-0933

Technical details about CVE-2020-0933 are not publicly available in the provided documents (no affected products, exploit info, or remediation details are described). Monitor for updates.

CVE-2020-1069

CVE-2020-1069 is a Microsoft SharePoint Server remote code execution vulnerability described as failing to properly identify and filter unsafe ASP.NET web controls. Public documents indicate an RCE could occur when processing unsafe ASP.NET controls (and related SharePoint package handling) with ...

CVE-2020-1320

Technical details about CVE-2020-1320 are not publicly provided in the connected documents. The EUVD entries mention malware unrelated to this CVE. Monitor for official disclosures or vendor advisories for specifics.

CVE-2020-1452

CVE-2020-1452 — SharePoint RCE : A remote code execution vulnerability where SharePoint fails to validate the source markup of application packages. Exploitation requires a user-uploaded, specially crafted SharePoint app package, allowing arbitrary code execution in the SharePoint application poo...

CVE-2025-47163

CVE-2025-47163 is a Microsoft SharePoint/SharePoint Server remote code execution vulnerability described as a deserialization of untrusted data that could allow an authorized attacker to execute code over a network. The CVE is documented across multiple sources (Microsoft MSRC advisories and CVE ...

CVE-2019-0670

CVE-2019-0670 is a spoofing vulnerability in Microsoft SharePoint Server caused by improper parsing of HTTP content. The affected product is SharePoint Server (various versions referenced in connected sources). The underlying issue is a failure to correctly handle specially crafted HTTP content, ...

CVE-2019-1070

CVE-2019-1070 is an XSS vulnerability affecting Microsoft SharePoint Server. The issue arises because SharePoint Server does not properly sanitize specially crafted web requests, enabling an attacker to execute scripts in the context of the current user after authentication. The published details...

CVE-2021-42294

CVE-2021-42294 is a Microsoft SharePoint Server remote code execution vulnerability. Affected products include SharePoint Server 2013/2016/2019 (including Subscription Edition). Public remediation exists via December 2021 security updates (e.g., KB5002054 for SharePoint Server 2019; associated MS...

CVE-2017-8512

Technical details about CVE-2017-8512 (affected product/version/root cause/impact/fix) are not provided in the connected documents. Monitor official advisories for updates; current materials do not specify exploitation or remediation information.

CVE-2020-0891

CVE-2020-0891 is a SharePoint Server cross-site scripting vulnerability (likely “Microsoft SharePoint Reflective XSS”) caused by improper sanitization of a specially crafted request. The issue is exploitable by an authenticated attacker sending crafted input to an affected SharePoint server. Conn...

CVE-2020-1103

CVE-2020-1103 is an information-disclosure vulnerability in Microsoft SharePoint Server. The issue affects how certain search modes handle CSRF-like browser behavior: when a logged-in user visits a malicious page, the browser can issue search queries on behalf of the user. The impact, as describe...

CVE-2020-1200

CVE-2020-1200 is a Microsoft SharePoint remote code execution vulnerability. It arises when SharePoint fails to properly check the source markup of an uploaded application package, allowing an attacker to execute arbitrary code within the SharePoint application pool context after a user uploads a...

CVE-2020-1500

CVE-2020-1500 is a SharePoint vulnerability in which an authenticated user could send a specially crafted request to a SharePoint Server, causing spoofing and cross-site scripting (XSS) in the user’s browser. The root cause is improper sanitization of web requests on SharePoint Server, enabling a...

CVE-2022-38009

The Connected KB article (KB5002271) confirms CVE-2022-38009 is part of the September 2022 security update for SharePoint Server Subscription Edition. It states this update resolves remote-code-execution vulnerabilities in SharePoint Server and requires installing the standalone security update p...

CVE-2020-1453

CVE-2020-1453 is a remote code execution vulnerability in Microsoft SharePoint. It occurs when SharePoint fails to validate the source markup of an application package uploaded to affected SharePoint versions, allowing an attacker to execute arbitrary code in the SharePoint application pool and s...

CVE-2020-1454

CVE-2020-1454 corresponds to a SharePoint Reflective XSS vulnerability. Affected product: SharePoint Server. Root cause: improper sanitization of a specially crafted request, enabling an authenticated attacker to trigger cross-site scripting on the affected server. In the connected scanning resul...

CVE-2019-0668

CVE-2019-0668 is an elevation-of-privilege vulnerability in Microsoft SharePoint Server caused by improper sanitization of crafted web requests. The connected Nessus plugins confirm multiple SharePoint vulnerabilities across several versions and indicate exploitation is not described in these doc...

CVE-2020-0977

CVE-2020-0977 is a spoofing vulnerability in Microsoft SharePoint Server where a specially crafted web request is not properly sanitized. The available connected document (Nessus plugin for SharePoint April 2020 updates) lists CVE-2020-0977 under a spoofing family of issues, alongside other relat...

CVE-2021-24071

CVE-2021-24071 is a Microsoft SharePoint Information Disclosure Vulnerability. The NVD entry lists a network-attack, low-complexity flaw with partial confidentiality impact (CVSSv2 4.0; CVSSv3.1 6.5; secrecy impact HIGH per CNA). Connected Nessus plugins describe multiple SharePoint vulnerabiliti...

CVE-2021-40484

CVE-2021-40484 is a Microsoft SharePoint Server spoofing vulnerability. Public records confirm a spoofing risk tied to SharePoint Server components, with a high-severity CVSS v3 base score from Microsoft’s advisory. The linked security update KB5002028 for SharePoint Server 2019 (and related patc...

CVE-2017-11775

CVE-2017-11775 / CVE-2017-11777 / CVE-2017-11820 describe a cross-site scripting (XSS) vulnerability in Microsoft SharePoint Enterprise Server 2013 SP1 and SharePoint Enterprise Server 2016. The issue stems from how SharePoint Server sanitizes web requests, allowing an attacker to craft a request...

CVE-2019-1202

CVE-2019-1202 affects Microsoft SharePoint where session objects are mishandled, enabling an authenticated attacker to hijack another user’s session. The root cause is improper handling of session objects within SharePoint. A specially crafted application could be used to exploit the flaw. Remedi...

CVE-2020-0693

Technical details for CVE-2020-0693 are not publicly available in the provided documents; no affected products, versions, or fixes are disclosed. Monitor for updates.

CVE-2020-0975

CVE-2020-0975 is a SharePoint Spoofing vulnerability in Microsoft SharePoint Server. The issue arises when SharePoint does not properly sanitize a specially crafted web request to the affected server, enabling spoofing under the SharePoint server context. Connected sources confirm this CVE as par...

CVE-2021-27052

CVE-2021-27052 is a Microsoft SharePoint Server information disclosure vulnerability affecting SharePoint Server 2016/2019 deployments. Public references in the provided connected data indicate exploitation relates to information disclosure (confidentiality impact) with remediation via security u...

CVE-2019-0562

CVE-2019-0562 affects Microsoft SharePoint Server/SharePoint where a crafted web request is not properly sanitized, leading to elevation of privilege. Root cause: improper sanitization of input in SharePoint Server. Impact: privilege escalation within the affected SharePoint context; the CVSS det...

CVE-2020-0924

Technical details for CVE-2020-0924 are not publicly available in the provided documents. Monitor for updates.

CVE-2020-1227

CVE-2020-1227 is a Microsoft SharePoint Server XSS vulnerability caused by improper sanitization of crafted web requests. An authenticated attacker can send a specially crafted request to an affected SharePoint server, enabling cross-site scripting and script execution in the user’s browser with ...

CVE-2020-1482

CVE-2020-1482 is a Microsoft SharePoint Server XSS vulnerability. An authenticated attacker can send a crafted web request to an affected SharePoint server, causing the server to execute script in the context of the current user. Impact statements from the sources indicate the attacker could read...

CVE-2020-1576

CVE-2020-1576 is a remote code execution vulnerability in Microsoft SharePoint. According to the provided sources, the flaw occurs when SharePoint fails to validate the source markup of an application package uploaded to an affected SharePoint version, allowing an attacker to execute arbitrary co...

CVE-2020-1580

CVE-2020-1580 is an XSS vulnerability in Microsoft SharePoint Server where improper sanitization of crafted web requests could allow an authenticated attacker to execute scripts in the user’s browser, potentially reading restricted content, impersonating the user, and altering permissions. The vu...

CVE-2022-38008

CVE-2022-38008 is addressed by Microsoft security update KB5002258 for SharePoint Server 2019, which fixes a remote code execution vulnerability in SharePoint. The update targets SharePoint Server 2019 (build 16.0.10390.20000) and covers CVE-2022-38008 alongside other fixes; apply/update per the ...

CVE-2019-0830

Microsoft SharePoint Server is affected by a cross-site scripting (XSS) vulnerability due to improper sanitization of crafted web requests. The issue is documented across multiple sources (e.g., CVE-2019-0830 and related entries) and is described as XSS in SharePoint. Connected documents confirm ...

CVE-2020-0925

Technical details for CVE-2020-0925 are not publicly available in the provided Connected documents. The EUVD entries mention malware unrelated to this CVE. Monitor for updates from official advisories and MSRC.

CVE-2020-1514

CVE-2020-1514 relates to a cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server. The issue arises when SharePoint does not properly sanitize a crafted web request, allowing an authenticated attacker to execute script in the user’s browser context, potentially reading restricted...

CVE-2019-1296

CVE-2019-1296 is a remote code execution vulnerability in Microsoft SharePoint. The issue arises because APIs aren’t properly protected from unsafe input data, enabling potentially arbitrary code execution in the context of the SharePoint server. Reports in connected sources confirm the vulnerabi...

CVE-2020-1024

CVE-2020-1024 concerns a remote code execution in Microsoft SharePoint caused by the product failing to check the source markup of an application package. The connected Nessus plugins for SharePoint Server indicate this alongside other vulnerabilities across multiple versions (e.g., SharePoint Se...

CVE-2017-11777

CVE-2017-11777 affects Microsoft SharePoint Enterprise Server 2013 SP1 and SharePoint Enterprise Server 2016. It describes a cross-site scripting (XSS) vulnerability arising from how SharePoint Server sanitizes web requests, enabling an attacker to craft a request to an affected SharePoint server...

CVE-2018-0909

Technical details for CVE-2018-0909, including affected products and remediation, are not publicly provided in the connected documents. Monitor official advisories for updates on impact and fixes.

CVE-2019-0952

CVE-2019-0952 is a remote code execution vulnerability in Microsoft SharePoint Server caused by failure to properly identify and filter unsafe ASP.NET web controls. Exploitation path involves sending a crafted page that executes in the SharePoint application pool’s security context, with authenti...

CVE-2019-1329

CVE-2019-1329 is an elevation-of-privilege vulnerability in Microsoft SharePoint Server caused by improper sanitization of a specially crafted web request. The issue enables privilege escalation on affected SharePoint Server instances. The provided documents do not include a remediation or patch ...

CVE-2020-1106

CVE-2020-1106 corresponds to a cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server, where improper sanitization of a crafted web request can lead to an XSS condition on the affected server. The NVD entry notes a CVSS v3.1 base score of 6.1 (Network, Low attack complexity, User...

CVE-2017-8514

CVE-2017-8514 corresponds to Microsoft SharePoint Reflective XSS. The linked documents confirm an information disclosure/reflective XSS vulnerability in SharePoint Server where improper sanitization of a crafted web request enables an authenticated attacker to trigger script execution in a victim...

CVE-2019-1033

Technical details for CVE-2019-1033 are not publicly available in the provided documents. No specifics on affected versions, root cause, or fixes are present here. Monitor for updates via the cited sources.

CVE-2019-1443

CVE-2019-1443 is an information-disclosure vulnerability in Microsoft SharePoint Server. An authenticated attacker who uploads a specially crafted file could leverage SharePoint functionality to obtain SMB hashes, with impact described as partial confidentiality exposure. The issue arises from ho...

CVE-2019-1330

CVE-2019-1330 details (normal mode): An elevation-of-privilege vulnerability exists in Microsoft SharePoint Server described as the “Microsoft SharePoint Elevation of Privilege Vulnerability.” The vulnerability involves improper handling/sanitization of specially crafted web requests to the affec...