Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
MicrosoftSharepoint Server*

249 matches found

CVE
CVE•added 2025/04/08 6:16 p.m.•110 views

CVE-2025-29794

Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

8.8CVSS7.4AI score0.00216EPSS
CVE
CVE•added 2019/09/11 10:15 p.m.•109 views

CVE-2019-1261

A spoofing vulnerability exists in Microsoft SharePoint when it improperly handles requests to authorize applications, resulting in cross-site request forgery (CSRF).To exploit this vulnerability, an attacker would need to create a page specifically designed to cause a cross-site request, aka 'Micr...

8.8CVSS8.2AI score0.05041EPSS
CVE
CVE•added 2022/06/15 10:15 p.m.•109 views

CVE-2022-30171

Microsoft Office Information Disclosure Vulnerability

5.5CVSS6.2AI score0.04622EPSS
CVE
CVE•added 2021/12/15 3:15 p.m.•108 views

CVE-2021-42309

Microsoft SharePoint Server Remote Code Execution Vulnerability

8.8CVSS7.8AI score0.01282EPSS
CVE
CVE•added 2020/03/12 4:15 p.m.•107 views

CVE-2020-0795

This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server.An authenticated attacker could exploit this vulnerability by sending a specially crafted request to an affected SharePoint server, aka 'Microsoft SharePoint R...

5.4CVSS5.3AI score0.00622EPSS
CVE
CVE•added 2025/01/14 6:16 p.m.•107 views

CVE-2025-21348

Microsoft SharePoint Server Remote Code Execution Vulnerability

7.2CVSS7.2AI score0.01265EPSS
CVE
CVE•added 2019/10/10 2:15 p.m.•106 views

CVE-2019-1331

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1327.

9.3CVSS8.8AI score0.37247EPSS
CVE
CVE•added 2020/04/15 3:15 p.m.•106 views

CVE-2020-0926

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0923, CVE-2020-0924, CVE-2020-0925...

5.4CVSS5.2AI score0.01102EPSS
CVE
CVE•added 2021/10/13 1:15 a.m.•106 views

CVE-2021-40482

Microsoft SharePoint Server Information Disclosure Vulnerability

7.5CVSS5.3AI score0.02662EPSS
CVE
CVE•added 2020/07/14 11:15 p.m.•105 views

CVE-2020-1444

A remote code execution vulnerability exists in the way Microsoft SharePoint software parses specially crafted email messages, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'.

4.3CVSS7AI score0.19485EPSS
CVE
CVE•added 2021/05/11 7:15 p.m.•105 views

CVE-2021-31171

Microsoft SharePoint Information Disclosure Vulnerability

4.4CVSS5.1AI score0.00396EPSS
CVE
CVE•added 2021/06/08 11:15 p.m.•105 views

CVE-2021-31964

Microsoft SharePoint Server Spoofing Vulnerability

8.1CVSS7.4AI score0.03799EPSS
CVE
CVE•added 2023/07/11 6:15 p.m.•105 views

CVE-2023-33157

Microsoft SharePoint Remote Code Execution Vulnerability

8.8CVSS8.7AI score0.07585EPSS
CVE
CVE•added 2023/08/08 6:15 p.m.•105 views

CVE-2023-36890

Microsoft SharePoint Server Information Disclosure Vulnerability

6.5CVSS6.3AI score0.02215EPSS
CVE
CVE•added 2025/01/14 6:16 p.m.•105 views

CVE-2025-21344

Microsoft SharePoint Server Remote Code Execution Vulnerability

7.8CVSS7.8AI score0.00371EPSS
CVE
CVE•added 2020/07/14 11:15 p.m.•104 views

CVE-2020-1439

A remote code execution vulnerability exists in PerformancePoint Services for SharePoint Server when the software fails to check the source markup of XML file input, aka 'PerformancePoint Services Remote Code Execution Vulnerability'.

8.8CVSS9.2AI score0.24597EPSS
CVE
CVE•added 2023/08/08 6:15 p.m.•104 views

CVE-2023-36894

Microsoft SharePoint Server Information Disclosure Vulnerability

6.5CVSS6.3AI score0.01359EPSS
CVE
CVE•added 2019/04/09 3:29 a.m.•103 views

CVE-2019-0778

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'.

5.4CVSS5.7AI score0.00579EPSS
CVE
CVE•added 2020/04/15 3:15 p.m.•103 views

CVE-2020-0923

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0924, CVE-2020-0925, CVE-2020-0926...

5.4CVSS5.2AI score0.01102EPSS
CVE
CVE•added 2021/09/15 12:15 p.m.•103 views

CVE-2021-38652

Microsoft SharePoint Server Spoofing Vulnerability

7.6CVSS5.2AI score0.01283EPSS
CVE
CVE•added 2023/07/11 6:15 p.m.•103 views

CVE-2023-33160

Microsoft SharePoint Server Remote Code Execution Vulnerability

8.8CVSS8.7AI score0.15961EPSS
CVE
CVE•added 2020/07/14 11:15 p.m.•102 views

CVE-2020-1447

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1446, CVE-2020-1448.

8.8CVSS8.8AI score0.43263EPSS
CVE
CVE•added 2021/06/08 11:15 p.m.•102 views

CVE-2021-31948

Microsoft SharePoint Server Spoofing Vulnerability

8.1CVSS7.4AI score0.04957EPSS
CVE
CVE•added 2022/11/09 10:15 p.m.•102 views

CVE-2022-41103

Microsoft Word Information Disclosure Vulnerability

5.5CVSS6.1AI score0.00285EPSS
CVE
CVE•added 2025/04/08 6:16 p.m.•102 views

CVE-2025-29793

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

7.2CVSS7.4AI score0.02321EPSS
CVE
CVE•added 2022/12/13 7:15 p.m.•101 views

CVE-2022-44690

Microsoft SharePoint Server Remote Code Execution Vulnerability

8.8CVSS8.7AI score0.33895EPSS
CVE
CVE•added 2024/06/11 5:15 p.m.•101 views

CVE-2024-30100

Microsoft SharePoint Server Remote Code Execution Vulnerability

7.8CVSS7.8AI score0.00671EPSS
CVE
CVE•added 2019/09/11 10:15 p.m.•100 views

CVE-2019-1260

An elevation of privilege vulnerability exists in Microsoft SharePoint, aka 'Microsoft SharePoint Elevation of Privilege Vulnerability'.

6.5CVSS7.2AI score0.11221EPSS
CVE
CVE•added 2020/05/21 11:15 p.m.•99 views

CVE-2020-1099

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1100, CVE-2020-1101, CVE-2020-1106...

5.4CVSS5.1AI score0.01851EPSS
CVE
CVE•added 2020/07/14 11:15 p.m.•99 views

CVE-2020-1456

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1450, CVE-2020-1451.

5.4CVSS5.1AI score0.00656EPSS
CVE
CVE•added 2022/10/11 7:15 p.m.•99 views

CVE-2022-41038

Microsoft SharePoint Server Remote Code Execution Vulnerability

8.8CVSS8.7AI score0.05111EPSS
CVE
CVE•added 2020/04/15 3:15 p.m.•98 views

CVE-2020-0971

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0920, CVE-2020-0929, CVE-2020-0931, CVE-2020-0932, C...

8.8CVSS8.3AI score0.30943EPSS
CVE
CVE•added 2022/02/09 5:15 p.m.•98 views

CVE-2022-21987

Microsoft SharePoint Server Spoofing Vulnerability

8CVSS8AI score0.05327EPSS
CVE
CVE•added 2020/06/09 8:15 p.m.•97 views

CVE-2020-1178

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted authentication request to an affected SharePoint server, aka 'Microsoft SharePoint Server Elevation of Privilege Vulnerability'.

8.8CVSS8.3AI score0.06667EPSS
CVE
CVE•added 2020/07/14 11:15 p.m.•97 views

CVE-2020-1448

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1446, CVE-2020-1447.

8.8CVSS8.8AI score0.43263EPSS
CVE
CVE•added 2019/04/09 9:29 p.m.•96 views

CVE-2019-0831

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2019-0830.

5.4CVSS5AI score0.00578EPSS
CVE
CVE•added 2024/12/12 2:4 a.m.•96 views

CVE-2024-49062

Microsoft SharePoint Information Disclosure Vulnerability

6.5CVSS6.1AI score0.00669EPSS
CVE
CVE•added 2020/04/15 3:15 p.m.•95 views

CVE-2020-0920

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0929, CVE-2020-0931, CVE-2020-0932, CVE-2020-0971, C...

8.8CVSS8.3AI score0.30943EPSS
CVE
CVE•added 2020/04/15 3:15 p.m.•95 views

CVE-2020-0978

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0923, CVE-2020-0924, CVE-2020-0925...

5.4CVSS5.2AI score0.01102EPSS
CVE
CVE•added 2020/06/09 8:15 p.m.•95 views

CVE-2020-1320

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1177, CVE-2020-1183, CVE-2020-1297...

5.4CVSS5.1AI score0.00773EPSS
CVE
CVE•added 2021/09/15 12:15 p.m.•95 views

CVE-2021-38651

Microsoft SharePoint Server Spoofing Vulnerability

7.6CVSS5.2AI score0.0108EPSS
CVE
CVE•added 2021/10/13 1:15 a.m.•95 views

CVE-2021-40483

Microsoft SharePoint Server Spoofing Vulnerability

7.6CVSS5.4AI score0.06439EPSS
CVE
CVE•added 2023/08/08 6:15 p.m.•95 views

CVE-2023-36892

Microsoft SharePoint Server Spoofing Vulnerability

8CVSS7.6AI score0.00247EPSS
CVE
CVE•added 2019/11/12 7:15 p.m.•94 views

CVE-2019-1446

An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel Information Disclosure Vulnerability'.

5.5CVSS5.6AI score0.08477EPSS
CVE
CVE•added 2020/03/12 4:15 p.m.•94 views

CVE-2020-0893

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0894.

5.4CVSS5.1AI score0.00898EPSS
CVE
CVE•added 2020/06/09 8:15 p.m.•94 views

CVE-2020-1297

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1177, CVE-2020-1183, CVE-2020-1298...

5.4CVSS5.1AI score0.00773EPSS
CVE
CVE•added 2020/07/14 11:15 p.m.•94 views

CVE-2020-1445

An information disclosure vulnerability exists when Microsoft Office improperly discloses the contents of its memory, aka 'Microsoft Office Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1342.

5.5CVSS6.1AI score0.28299EPSS
CVE
CVE•added 2020/07/14 11:15 p.m.•94 views

CVE-2020-1450

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1451, CVE-2020-1456.

5.4CVSS5.1AI score0.00656EPSS
CVE
CVE•added 2023/07/11 6:15 p.m.•93 views

CVE-2023-33134

Microsoft SharePoint Server Remote Code Execution Vulnerability

8.8CVSS8.7AI score0.19297EPSS
CVE
CVE•added 2024/07/09 5:15 p.m.•93 views

CVE-2024-32987

Microsoft SharePoint Server Information Disclosure Vulnerability

7.5CVSS7.2AI score0.16251EPSS
Total number of security vulnerabilities249