Known vulnerabilities in Microsoft Project Server

Vendor: Microsoft
Software: Microsoft Project Server
Software CPE: cpe:2.3:a:microsoft:microsoft_project_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 22
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft Project Server Microsoft Project Server is affected by 22 known vulnerabilities: 3 high, 1 medium, 18 low Critical High Medium Low

Vulnerabilities (22)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU29784 - Improper input validation
CVE-2020-1449		 CWE-20 High
No
No
 - 14.07.2020 SB2020071434
#VU28840 - Out-of-bounds read
CVE-2020-1322		 CWE-125 Medium
No
No
 - 09.06.2020 SB2020060922
#VU26852 - Improper input validation
CVE-2020-0760		 CWE-20 High
No
No
 - 14.04.2020 SB2020041418
#VU26786 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-0954		 CWE-79 Low
No
No
 - 14.04.2020 SB2020041404
#VU18781 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-1033		 CWE-79 Low
No
No
 - 12.06.2019 SB2019061205
#VU18778 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-1036		 CWE-79 Low
No
No
 - 12.06.2019 SB2019061205
#VU15857 - Memory corruption
CVE-2018-8575		 CWE-119 High
No
No
 - 13.11.2018 SB2018111324
#VU13288 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-8254		 CWE-79 Low
No
No
 - 12.06.2018 SB2018061211
#VU12496 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-8156		 CWE-79 Low
No
No
 - 08.05.2018 SB2018050824
SB2018050825
#VU11023 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-0944		 CWE-79 Low
No
No
 - 13.03.2018 SB2018031310
SB2018031312
#VU11020 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-0916		 CWE-79 Low
No
No
 - 13.03.2018 SB2018031310
SB2018031312
#VU11018 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-0915		 CWE-79 Low
No
No
 - 13.03.2018 SB2018031310
SB2018031312
#VU11017 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-0914		 CWE-79 Low
No
No
 - 13.03.2018 SB2018031310
SB2018031312
#VU11016 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-0913		 CWE-79 Low
No
No
 - 13.03.2018 SB2018031310
SB2018031312
#VU11015 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-0912		 CWE-79 Low
No
No
 - 13.03.2018 SB2018031310
SB2018031312
#VU11014 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-0911		 CWE-79 Low
No
No
 - 13.03.2018 SB2018031310
SB2018031312
#VU11013 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-0910		 CWE-79 Low
No
No
 - 13.03.2018 SB2018031310
SB2018031312
#VU11011 - Permissions, Privileges, and Access Controls
CVE-2018-0947		 CWE-264 Low
No
No
 - 13.03.2018 SB2018031310
SB2018031312
#VU11012 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-0909		 CWE-79 Low
No
No
 - 13.03.2018 SB2018031310
SB2018031312
#VU10529 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-0864		 CWE-79 Low
No
No
 - 13.02.2018 SB2018021312
SB2018021313


Showing elements 1 - 20 out of 22