CVE-2020-17115

CVE-2020-17115 is described across connected sources as a session spoofing vulnerability in Microsoft SharePoint Server. The provided Nessus plugin entries group this CVE with other SharePoint CVEs and indicate vulnerable state when updates are missing (e.g., December 2020 security updates). Conc...

CVE-2013-0081

CVE-2013-0081 affects Microsoft SharePoint components (SharePoint Portal Server 2003 SP3; SharePoint Server 2007 SP3; 2010 SP1/SP2; 2013) and causes a denial of service by abusing unassigned workflows via a crafted URL, triggering W3WP process hang. The issue is listed among MS13-067 vulnerabilit...

CVE-2023-21717

CVE-2023-21717 affects Microsoft SharePoint Server as an Elevation of Privilege vulnerability. Connected sources confirm affected SharePoint Server family (2013/2016/2019 and Subscription/Foundation variants) with multiple references to CVE-21717 and CVE-21716; the exact root cause is not detaile...

CVE-2012-0017

CVE-2012-0017 is an XSS in Microsoft SharePoint Foundation 2010 Gold/SP1 via inplview.aspx. The underlying issue is improper handling of JavaScript sequences in a URL, allowing remote attackers to inject arbitrary script/HTML. Affected product/version: SharePoint Foundation 2010 (Gold/SP1). Docum...

CVE-2021-31172

CVE-2021-31172 is a Microsoft SharePoint Server spoofing vulnerability. Public docs here indicate the issue is addressed by the May 11, 2021 security update for SharePoint Server 2019 (KB5001916), which also covers related CVEs in the same bulletin. The CVE entry cites a SharePoint spoofing vulne...

CVE-2021-1707

CVE-2021-1707 is a remote code execution vulnerability in Microsoft SharePoint Server. The linked EUVD/Nessus entries and CNVD page confirm it affects SharePoint Server variants and stems from insufficient input validation, enabling code execution by a remote attacker over the network with no use...

CVE-2021-31173

CVE-2021-31173 is a Microsoft SharePoint Server Information Disclosure vulnerability. Public sources (NVD) assign a CVSS v3.1 base score of 6.5 (Network, Low attack complexity, Low privileges required, No user interaction) with a high potential impact to confidentiality and no impact to integrity...

CVE-2013-0080

CVE-2013-0080 affects Microsoft SharePoint Server 2010 SP1 and SharePoint Foundation 2010 SP1. A crafted URL vulnerability (Callback Function Vulnerability) lets remote attackers bypass read restrictions and hijack user accounts by enticing a target user to visit a malicious page. The issue arise...

CVE-2019-1295

CVE-2019-1295 is a remote code execution vulnerability in Microsoft SharePoint where APIs aren’t properly protected from unsafe input. The connected Nessus plugins describe multiple vulnerabilities affecting Microsoft SharePoint Server (e.g., 2019 and 2016 builds) including this CVE, with the iss...

CVE-2021-34517

CVE-2021-34517 is a Microsoft SharePoint Server spoofing vulnerability. Connected sources indicate this CVE is addressed by Security Update KB5001975 for SharePoint Server 2019 (16.0.10376.20001). The KB entry associates the CVE with SharePoint Server spoofing remediation and notes that the updat...

CVE-2012-1861

CVE-2012-1861 is an XSS vulnerability in Microsoft SharePoint 2010 (Gold/SP1), SharePoint Foundation 2010 (Gold/SP1), and Office Web Apps 2010 (Gold/SP1) where attacker-controlled JavaScript in a URL can execute in the user’s browser. Public sources (OpenVAS/Nessus/Tenable entry MS12-050) referen...

CVE-2013-0086

Microsoft OneNote 2010 SP1 is affected by CVE-2013-0086 due to a buffer size validation flaw during memory allocation while parsing OneNote files. The root cause is improper buffer size handling, which can lead to information disclosure when a crafted OneNote file is opened. Affected product: One...

CVE-2020-1023

CVE-2020-1023 is a remote code execution vulnerability in Microsoft SharePoint described in the connected Nessus entries as affecting SharePoint Server versions that rely on self-reported version numbers: SharePoint Server 2013 < 15.0.5241.1000, SharePoint Server 2016 < 16.0.5005.1000, and ...

CVE-2021-1641

CVE-2021-1641 is a session spoofing vulnerability affecting Microsoft SharePoint Server. The connected sources confirm affected products span SharePoint Server 2010 through 2019, with multiple related CVEs (e.g., CVE-2021-1707, CVE-2021-1712, CVE-2021-1715/1716/1717/1719) that were addressed in J...

CVE-2021-28478

Technical details about CVE-2021-28478 are not provided in the connected documents. They only reference a SharePoint spoofing vulnerability without specific affected versions, vectors, or remediation. Monitor official disclosures and patches for updates.

CVE-2022-41122

CVE-2022-41122 is described in connected CNVD/NVD sources as a Microsoft SharePoint Server spoofing vulnerability. The CNVD entry notes that an attacker could exploit a specially crafted website to spoof content, tricking users into believing the site is legitimate. The available documents do not...

CVE-2021-28450

CVE-2021-28450 is a Microsoft SharePoint Denial of Service vulnerability affecting SharePoint Server 2010–2019 (and related versions) with CVE-2021-28453 referenced as a Word RCE vulnerability. Connected advisories/scans indicate multiple vulnerabilities in SharePoint Server lines and map to Micr...

CVE-2013-0083

CVE-2013-0083 affects Microsoft SharePoint Server 2010 SP1 (and SharePoint Foundation 2010) via a cross-site scripting (XSS) vulnerability in crafted site content that allows an attacker to inject arbitrary script/HTML. This could lead to execution of administrative commands in the context of the...

CVE-2020-16953

CVE-2020-16953 is an information-disclosure vulnerability in Microsoft SharePoint Server caused by improper handling of objects in memory. Exploitation requires an attacker to log on to an affected system and run a crafted application, enabling them to obtain sensitive information to further comp...

CVE-2020-17089

CVE-2020-17089 is a Microsoft SharePoint elevation-of-privilege vulnerability reported across multiple advisories. Connected sources confirm the issue affects SharePoint Server instances and is associated with related CVEs (e.g., CVE-2020-17115, CVE-2020-17118, CVE-2020-17120, CVE-2020-17121, CVE...

CVE-2020-17120

The CVE-2020-17120 entry corresponds to a Microsoft SharePoint Information Disclosure Vulnerability. Connected sources confirm it is part of multiple SharePoint Server vulnerabilities across several versions (2010, 2013, 2016, 2019) and is listed among updates released in December 2020. The vulne...

CVE-2020-16941

CVE-2020-16941 describes an information-disclosure vulnerability in Microsoft SharePoint Server where, on certain pages, the server improperly discloses the folder structure by revealing the folder path of scripts loaded on the page. An attacker must have access to the affected SharePoint page to...

CVE-2022-30158

CVE-2022-30158 corresponds to a Microsoft SharePoint Server remote code execution vulnerability. According to the connected sources, the vulnerability affects Microsoft SharePoint Server with RCE potential impacting confidentiality, integrity, and availability (all High). The CVSS v3.1 score is 8...

CVE-2022-37961

CVE-2022-37961 is a remote code execution vulnerability in Microsoft SharePoint Server. The Connected KB describes a security update (KB5002271) for SharePoint Server Subscription Edition (16.0.x) released around Sep 13, 2022 that resolves this RCE alongside related SharePoint RCE advisories. Aff...

CVE-2020-16948

CVE-2020-16948 : A information-disclosure vulnerability in Microsoft SharePoint Server arises when the server fails to properly handle objects in memory, allowing an attacker who can log on and run a crafted application to obtain information that could help further compromise the system. The issu...

CVE-2012-0145

CVE-2012-0145 is an XSS vulnerability in wizardlist.aspx affecting Microsoft SharePoint Server 2010 Gold/SP1 and SharePoint Foundation 2010 Gold/SP1. The issue allows remote attackers to inject arbitrary script/HTML via JavaScript sequences in a URL, per the description of the vulnerability. Publ...

CVE-2020-0920

CVE-2020-0920 is a remote code execution vulnerability in Microsoft SharePoint where the system fails to check the source markup of an application package. Affected product: SharePoint Server. Impact: RCE with potential execution in the context of SharePoint. The connected analysis notes that thr...

CVE-2020-0923

Technical details for CVE-2020-0923 are not publicly provided in the supplied documents; no product/version/exploit data is available. Monitor for updates.

CVE-2020-1107

Technical details about CVE-2020-1107 are not publicly available in the provided connected documents. Monitor for updates from authoritative sources for affected products, impact, and fixes.

CVE-2021-42309

CVE-2021-42309 is a remote code execution vulnerability in Microsoft SharePoint Server identified across multiple SharePoint versions (2013/2016/2019 and Subscription Edition). Public sources in the connected documents describe an RCE vector that allows an attacker to bypass authentication or exe...

CVE-2020-1439

CVE-2020-1439 is a remote code execution vulnerability in Microsoft SharePoint’s PerformancePoint Services. The root cause, as stated in multiple sources, is that the service fails to validate the source markup of input XML, allowing an attacker to craft input that leads to code execution within ...

CVE-2020-1501

CVE-2020-1501 is a Microsoft SharePoint Server spoofing vulnerability where a specially crafted web request is not properly sanitized, enabling an authenticated attacker to perform cross‑site scripting and execute actions in the user’s security context. The impact described in the sources include...

CVE-2013-3180

CVE-2013-3180 is a cross-site scripting vulnerability in Microsoft SharePoint Server 2010 SP1/SP2 and SharePoint Server 2013. It allows remote attackers to inject arbitrary web script or HTML via a crafted POST request (POST XSS). The issue is documented under MS13-067; affected products include ...

CVE-2018-8284

CVE-2018-8284 is a remote code execution vulnerability in the Microsoft .NET Framework caused by improper input validation. The NVD entry lists affected runtimes across multiple versions (e.g., .NET Framework 2.0/3.0/3.5/3.5.1 and 4.x releases up to 4.7.2, including 4.6.x and 4.7.x). Microsoft MS...

CVE-2020-0892

CVE-2020-0892 is a Microsoft Word remote code execution vulnerability. The linked documents confirm Word is vulnerable when it fails to properly handle objects in memory, allowing a crafted file to run code in the current user’s context. The issue is tied to multiple Word-related CVEs and is disc...

CVE-2020-0976

CVE-2020-0976 is a SharePoint Server spoofing vulnerability. The entry notes improper sanitization of a crafted web request to affected SharePoint servers, enabling spoofing. Nessus/patch data in connected documents indicate this CVE is included in Microsoft’s April 2020 updates, with remediation...

CVE-2021-31965

Technical details (affected product/component/version/root cause/impact/fix) for CVE-2021-31965 are not provided in the connected documents. Monitor for updates and refer to official advisories (MSRC) for precise guidance.

CVE-2012-0144

CVE-2012-0144 is an XSS vulnerability in themeweb.aspx affecting Microsoft SharePoint products: SharePoint Server 2010 Gold/SP1 and SharePoint Foundation 2010 Gold/SP1. The issue allows remote attackers to inject arbitrary web script or HTML via JavaScript sequences in a URL. OpenVAS/Nessus entri...

CVE-2021-1726

CVE-2021-1726 is a SharePoint Server spoofing vulnerability observed in multiple versions (2013/2016/2019). Exploitation involves spoofed content convincing users of a trusted site. Microsoft released updates (e.g., MS21-4493194/4493195 and related MSKBs) addressing this CVE; affected deployments...

CVE-2020-16946

The CVE-2020-16946 entry refers to a cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server where crafted web requests are not properly sanitized. The authenticated attacker could execute scripts in the user’s browser context, potentially reading restricted content and performing...

CVE-2022-44690

CVE-2022-44690 is a Microsoft SharePoint Server Remote Code Execution vulnerability. Public sources classify it as a network-exploitable flaw with high impact (CB> Confidentiality, Integrity, Availability all High) per CVSS v3.1: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. Connected documents confirm...

CVE-2019-1260

CVE-2019-1260 is an elevation-of-privilege vulnerability in Microsoft SharePoint. The vulnerability is described as allowing an attacker to impersonate a user or gain higher privileges via vulnerable SharePoint components. Public references in connected documents indicate affected SharePoint Serv...

CVE-2020-0971

SharePoint Remote Code Execution (CVE-2020-0971) is described as a vulnerability in Microsoft SharePoint where the software fails to validate the source markup of an application package, enabling remote code execution. Connected Nessus entries reference SharePoint Server versions (e.g., 2013, 201...

CVE-2021-24066

CVE-2021-24066 is a Microsoft SharePoint remote code execution vulnerability. Connected sources confirm it affects SharePoint Server (2013/2016/2019) and is addressed by February 2021 security updates (MS21-4493xx). The CVE is listed among multiple vulnerabilities; explicit exploitation details a...

CVE-2019-1261

Microsoft SharePoint vulnerable to a spoofing/CSRF issue in which improper handling of requests to authorize applications can allow an attacker to perform cross-site requests. CVE-2019-1261 is the associated entry, distinct from CVE-2019-1259. Connected documents also reference related SharePoint...

CVE-2020-0795

CVE-2020-0795 concerns Microsoft SharePoint Reflective Cross-Site Scripting. The vulnerability arises when SharePoint Server fails to properly sanitize a specially crafted request, allowing an authenticated attacker to exploit an XSS condition. It is distinct from CVE-2020-0891. Connected sources...

CVE-2020-1177

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2021-31171

Technical details about CVE-2021-31171 are not publicly provided in the supplied documents; monitor for updates.

CVE-2021-31948

CVE-2021-31948 technical details are not publicly provided in the supplied documents. Monitor for updates.

CVE-2021-38652

CVE-2021-38652 is a Microsoft SharePoint Server spoofing vulnerability affecting on-premises SharePoint components. Public CVSS3.1 metrics from NVD show a base score of 3.5 (LOW) with network exposure, low attack complexity, low privileges required, and user interaction required; confidentiality ...