Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
MicrosoftSharepoint Server

8 matches found

CVE
CVE•added 2023/03/14 5:15 p.m.•170 views

CVE-2023-23395

Microsoft SharePoint Server Spoofing Vulnerability

3.1CVSS4AI score0.00854EPSS
CVE
CVE•added 2015/03/11 10:59 a.m.•66 views

CVE-2015-1636

Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Foundation 2013 Gold and SP1 and SharePoint Server 2013 Gold and SP1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted request, aka "Microsoft SharePoint XSS Vulnerability."

3.5CVSS4.6AI score0.07905EPSS
CVE
CVE•added 2015/03/11 10:59 a.m.•63 views

CVE-2015-1633

Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Foundation 2010 SP2, SharePoint Server 2010 SP2, SharePoint Foundation 2013 Gold and SP1, and SharePoint Server 2013 Gold and SP1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted request, aka "Mic...

3.5CVSS4.6AI score0.07905EPSS
CVE
CVE•added 2015/10/14 1:59 a.m.•55 views

CVE-2015-6039

Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2013 SP1 and SharePoint Foundation 2013 SP1 allows remote authenticated users to inject arbitrary web script or HTML via crafted content in an Office Marketplace instance, aka "Microsoft SharePoint Security Feature Bypass Vulne...

3.5CVSS5.3AI score0.0902EPSS
CVE
CVE•added 2010/02/26 7:30 p.m.•54 views

CVE-2010-0716

_layouts/Upload.aspx in the Documents module in Microsoft SharePoint before 2010 uses URLs with the same hostname and port number for a web site's primary files and individual users' uploaded files (aka attachments), which allows remote authenticated users to leverage same-origin relationships and ...

3.5CVSS5.5AI score0.1627EPSS
CVE
CVE•added 2013/04/09 10:55 p.m.•54 views

CVE-2013-1290

Microsoft SharePoint Server 2013, in certain configurations involving legacy My Sites, does not properly establish default access controls for a SharePoint list, which allows remote authenticated users to bypass intended restrictions on reading list items via a direct request for a list's location,...

3.5CVSS6.1AI score0.19287EPSS
CVE
CVE•added 2008/11/10 3:23 p.m.•51 views

CVE-2008-5026

Microsoft SharePoint uses URLs with the same hostname and port number for a web site's primary files and individual users' uploaded files (aka attachments), which allows remote authenticated users to leverage same-origin relationships and conduct cross-site scripting (XSS) attacks by uploading HTML...

3.5CVSS5.2AI score0.1627EPSS
CVE
CVE•added 2015/10/14 1:59 a.m.•51 views

CVE-2015-6037

Cross-site scripting (XSS) vulnerability in Microsoft Excel Services on SharePoint Server 2010 SP2 and 2013 SP1, Office Web Apps 2010 SP2, Excel Web App 2010 SP2, Office Web Apps Server 2013 SP1, and SharePoint Foundation 2013 SP1 allows remote authenticated users to inject arbitrary web script or ...

3.5CVSS4.7AI score0.10637EPSS