CVE-2020-0891

CVE-2020-0891 is a SharePoint Server cross-site scripting vulnerability (likely “Microsoft SharePoint Reflective XSS”) caused by improper sanitization of a specially crafted request. The issue is exploitable by an authenticated attacker sending crafted input to an affected SharePoint server. Conn...

CVE-2020-1514

CVE-2020-1514 relates to a cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server. The issue arises when SharePoint does not properly sanitize a crafted web request, allowing an authenticated attacker to execute script in the user’s browser context, potentially reading restricted...

CVE-2021-24071

CVE-2021-24071 is a Microsoft SharePoint Information Disclosure Vulnerability. The NVD entry lists a network-attack, low-complexity flaw with partial confidentiality impact (CVSSv2 4.0; CVSSv3.1 6.5; secrecy impact HIGH per CNA). Connected Nessus plugins describe multiple SharePoint vulnerabiliti...

CVE-2019-1202

CVE-2019-1202 affects Microsoft SharePoint where session objects are mishandled, enabling an authenticated attacker to hijack another user’s session. The root cause is improper handling of session objects within SharePoint. A specially crafted application could be used to exploit the flaw. Remedi...

CVE-2020-1453

CVE-2020-1453 is a remote code execution vulnerability in Microsoft SharePoint. It occurs when SharePoint fails to validate the source markup of an application package uploaded to affected SharePoint versions, allowing an attacker to execute arbitrary code in the SharePoint application pool and s...

CVE-2020-1580

CVE-2020-1580 is an XSS vulnerability in Microsoft SharePoint Server where improper sanitization of crafted web requests could allow an authenticated attacker to execute scripts in the user’s browser, potentially reading restricted content, impersonating the user, and altering permissions. The vu...

CVE-2021-43242

CVE-2021-43242 is a Microsoft SharePoint Server spoofing vulnerability. Connected sources indicate the issue affects multiple SharePoint Server editions (2013/2016/2019 and SharePoint Server Subscription Edition) and is described as a session spoofing flaw that can allow an attacker to perform ac...

CVE-2022-38009

The Connected KB article (KB5002271) confirms CVE-2022-38009 is part of the September 2022 security update for SharePoint Server Subscription Edition. It states this update resolves remote-code-execution vulnerabilities in SharePoint Server and requires installing the standalone security update p...

CVE-2014-0251

CVE-2014-0251 affects Microsoft SharePoint products including Windows SharePoint Services 3.0 SP3, SharePoint Server 2007 SP3, 2010 SP1/SP2, 2013 Gold/SP1, SharePoint Foundation 2010 SP1/SP2/2013 Gold/SP1, Project Server 2010 SP1/SP2/2013 Gold/SP1, Web Applications 2010 SP1/SP2, Office Web Apps S...

CVE-2019-0958

The provided documents describe CVE-2019-0958 as an elevation-of-privilege vulnerability in Microsoft SharePoint Server caused by improper sanitization of specially crafted web requests. Affected product: SharePoint Server. Root cause: failure to sanitize web input leading to privilege escalation...

CVE-2020-0924

Technical details for CVE-2020-0924 are not publicly available in the provided documents. Monitor for updates.

CVE-2020-0925

Technical details for CVE-2020-0925 are not publicly available in the provided Connected documents. The EUVD entries mention malware unrelated to this CVE. Monitor for updates from official advisories and MSRC.

CVE-2020-1227

CVE-2020-1227 is a Microsoft SharePoint Server XSS vulnerability caused by improper sanitization of crafted web requests. An authenticated attacker can send a specially crafted request to an affected SharePoint server, enabling cross-site scripting and script execution in the user’s browser with ...

CVE-2020-1482

CVE-2020-1482 is a Microsoft SharePoint Server XSS vulnerability. An authenticated attacker can send a crafted web request to an affected SharePoint server, causing the server to execute script in the context of the current user. Impact statements from the sources indicate the attacker could read...

CVE-2020-1576

CVE-2020-1576 is a remote code execution vulnerability in Microsoft SharePoint. According to the provided sources, the flaw occurs when SharePoint fails to validate the source markup of an application package uploaded to an affected SharePoint version, allowing an attacker to execute arbitrary co...

CVE-2021-40484

CVE-2021-40484 is a Microsoft SharePoint Server spoofing vulnerability. Public records confirm a spoofing risk tied to SharePoint Server components, with a high-severity CVSS v3 base score from Microsoft’s advisory. The linked security update KB5002028 for SharePoint Server 2019 (and related patc...

CVE-2022-38008

CVE-2022-38008 is addressed by Microsoft security update KB5002258 for SharePoint Server 2019, which fixes a remote code execution vulnerability in SharePoint. The update targets SharePoint Server 2019 (build 16.0.10390.20000) and covers CVE-2022-38008 alongside other fixes; apply/update per the ...

CVE-2014-1754

CVE-2014-1754 is a cross-site scripting (XSS) vulnerability affecting Microsoft SharePoint Server 2013 (Gold/SP1), SharePoint Foundation 2013 (Gold/SP1), Office Web Apps Server 2013 (Gold/SP1), and SharePoint Server 2013 Client Components SDK. The issue allows remote attackers to inject arbitrary...

CVE-2019-1296

CVE-2019-1296 is a remote code execution vulnerability in Microsoft SharePoint. The issue arises because APIs aren’t properly protected from unsafe input data, enabling potentially arbitrary code execution in the context of the SharePoint server. Reports in connected sources confirm the vulnerabi...

CVE-2019-0830

Microsoft SharePoint Server is affected by a cross-site scripting (XSS) vulnerability due to improper sanitization of crafted web requests. The issue is documented across multiple sources (e.g., CVE-2019-0830 and related entries) and is described as XSS in SharePoint. Connected documents confirm ...

CVE-2019-0951

CVE-2019-0951 is a spoofing vulnerability in Microsoft SharePoint Server where a specially crafted web request is not properly sanitized. It is distinct from CVE-2019-0949/0950. The CVSS v3 base score is 5.4 (Medium); attack vector NETWORK and user interaction is required. Connected sources do no...

CVE-2019-1443

CVE-2019-1443 is an information-disclosure vulnerability in Microsoft SharePoint Server. An authenticated attacker who uploads a specially crafted file could leverage SharePoint functionality to obtain SMB hashes, with impact described as partial confidentiality exposure. The issue arises from ho...

CVE-2020-0975

CVE-2020-0975 is a SharePoint Spoofing vulnerability in Microsoft SharePoint Server. The issue arises when SharePoint does not properly sanitize a specially crafted web request to the affected server, enabling spoofing under the SharePoint server context. Connected sources confirm this CVE as par...

CVE-2020-1183

Technical details (vulnerable product specifics, root cause, exploit information, mitigation) for CVE-2020-1183 are not provided in the connected documents. Monitor for updates from official advisories and third-party sources.

CVE-2019-1033

Technical details for CVE-2019-1033 are not publicly available in the provided documents. No specifics on affected versions, root cause, or fixes are present here. Monitor for updates via the cited sources.

CVE-2019-1330

CVE-2019-1330 details (normal mode): An elevation-of-privilege vulnerability exists in Microsoft SharePoint Server described as the “Microsoft SharePoint Elevation of Privilege Vulnerability.” The vulnerability involves improper handling/sanitization of specially crafted web requests to the affec...

CVE-2020-0972

CVE-2020-0972 is a spoofing vulnerability in Microsoft SharePoint Server where a specially crafted web request is not properly sanitized. The issue is tied to SharePoint’s handling of spoofing-related requests and is listed among a set of April 2020 SharePoint vulnerabilities in the Nessus plugin...

CVE-2020-1106

CVE-2020-1106 corresponds to a cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server, where improper sanitization of a crafted web request can lead to an XSS condition on the affected server. The NVD entry notes a CVSS v3.1 base score of 6.1 (Network, Low attack complexity, User...

CVE-2010-3324

CVE-2010-3324 describes an IE8/SharePoint CSS @import-based XSS bypass. The connected MSKB MS10-035 documents a broader cumulative security update for Internet Explorer to address IE vulnerabilities (including remote code execution via crafted pages) and provides update guidance. However, the pro...

CVE-2019-0952

CVE-2019-0952 is a remote code execution vulnerability in Microsoft SharePoint Server caused by failure to properly identify and filter unsafe ASP.NET web controls. Exploitation path involves sending a crafted page that executes in the SharePoint application pool’s security context, with authenti...

CVE-2020-1024

CVE-2020-1024 concerns a remote code execution in Microsoft SharePoint caused by the product failing to check the source markup of an application package. The connected Nessus plugins for SharePoint Server indicate this alongside other vulnerabilities across multiple versions (e.g., SharePoint Se...

CVE-2020-1104

Technical details about CVE-2020-1104 are not publicly provided in the supplied documents. Monitor for updates from vendors and ENISA/NVD for confirmed fixes and affected products.

CVE-2020-1298

Technical details for CVE-2020-1298 are not publicly provided in the connected documents. Monitor for updates; current materials do not specify affected products, root cause, impact, or fixes beyond the initial description.

CVE-2015-6117

CVE-2015-6117 affects Microsoft SharePoint Server 2013 SP1 and SharePoint Foundation 2013 SP1. The vulnerability arises from a security feature bypass where remote authenticated users can bypass access control by modifying a webpart, enabling cross-site scripting (XSS). The issue is documented as...

CVE-2016-0136

CVE-2016-0136 affects Microsoft Excel 2007 SP3, Excel 2010 SP2, Office Compatibility Pack SP3, and Excel Services on SharePoint Server 2007 SP3/2010 SP2. The root cause is memory corruption from improper handling of objects in memory, enabling remote code execution when a crafted Office document ...

CVE-2018-8568

The CVE-2018-8568/8572 family concerns Microsoft SharePoint Server. A vulnerability exists where SharePoint does not properly sanitize/filter a specially crafted web request sent to an affected SharePoint server, enabling an authenticated attacker to elevate privileges. Affected products: Microso...

CVE-2019-0950

The connected Nessus findings identify CVE-2019-0950 as a Spoofing vulnerability in Microsoft SharePoint Server , arising from the product’s failure to properly sanitize a specially crafted web request. Affected software includes SharePoint Server 2019 (builds older than 16.0.10345.12101) and Sha...

CVE-2019-1329

CVE-2019-1329 is an elevation-of-privilege vulnerability in Microsoft SharePoint Server caused by improper sanitization of a specially crafted web request. The issue enables privilege escalation on affected SharePoint Server instances. The provided documents do not include a remediation or patch ...

CVE-2020-1443

CVE-2020-1443 describes a spoofing vulnerability in Microsoft SharePoint Server caused by improper sanitization of a specially crafted web request. Multiple connected sources (NVD, CNVD, and related Nessus entries) reiterate that SharePoint Server does not properly sanitize crafted requests, enab...

CVE-2018-0790

CVE-2018-0790 affects Microsoft SharePoint Foundation 2010, and Microsoft SharePoint Server 2013 and 2016. The vulnerability is an elevation of privilege due to the way web requests are handled in these products. The description lists the issue as a privilege escalation vulnerability and explicit...

CVE-2020-1101

CVE-2020-1101 describes a cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server where the application does not properly sanitize a specially crafted web request. The issue affects SharePoint Server (per the CVE) and is corroborated by connected sources noting XSS in SharePoint S...

CVE-2017-0107

CVE-2017-0107 corresponds to a Microsoft SharePoint/SharePoint Server cross-site scripting vulnerability where crafted web requests are not properly sanitized, enabling an attacker with authenticated access to execute script in the user’s browser and potentially access/modify content. Affected co...

CVE-2020-1575

The CVE-2020-1575 entry describes a cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server caused by improper sanitization of crafted web requests. An authenticated attacker can exploit this by sending a specially crafted request to an affected SharePoint server, enabling XSS in ...

CVE-2022-41037

CVE-2022-41037 is a Microsoft SharePoint Server remote code execution vulnerability. Public docs confirm a remote-code-execution issue in SharePoint Server and a security update path: KB5002283 (SharePoint Server 2013) and KB5002290 (SharePoint Server Subscription Edition) address the vulnerabili...

CVE-2015-1682

Microsoft Office Multiple Remote Code Execution Vulnerabilities (CVE-2015-1682) affect Office/SharePoint components across Office 2010 SP2, Office 2013 SP1, Office for Mac 2011, Word/Excel/PowerPoint/SharePoint-related services, etc. Root cause: memory corruption triggered by processing a crafted...

CVE-2017-8745

CVE-2017-8745 is an elevation-of-privilege vulnerability in Microsoft SharePoint Foundation 2013 SP1 caused by improper sanitization of a specially crafted web request to the SharePoint server (cross-site scripting). Public details in connected sources confirm the issue is associated with the Sha...

CVE-2019-0956

CVE-2019-0956 is described across connected sources as an information disclosure in Microsoft SharePoint Server caused by improper sanitization of specially crafted web requests. The published remediation is a security update (MS19-4464564 family) that addresses SharePoint Server web-request sani...

CVE-2020-1318

Technical details for CVE-2020-1318 are not publicly available in the provided documents; monitor for updates from official advisories.

CVE-2018-8254

Root cause: elevation of privilege in Microsoft SharePoint Server due to improper filtering of certain web requests. Affected products include SharePoint Server and Project Server (e.g., SharePoint Enterprise Server 2016 and SharePoint Foundation 2013 SP1 per CNVD entries). CVSS metrics indicate ...

CVE-2019-0963

CVE-2019-0963 is a cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server caused by inadequate sanitization of crafted web requests. Public details in connected documents show affected products/versions: SharePoint 2016 (builds < 16.0.4849.1000) and SharePoint 2019 (builds