Known vulnerabilities in Microsoft Project Server 2013 Service Pack 1

Vendor: Microsoft
Software: Microsoft Project Server
Version: 2013 Service Pack 1
Software CPE: cpe:2.3:a:microsoft:microsoft_project_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 16
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Microsoft Project Server version 2013 Service Pack 1 Microsoft Project Server 2013 Service Pack 1 is affected by 16 vulnerabilities: 1 high, 15 low Critical High Medium Low

Vulnerabilities (16)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU26786 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-0954		 CWE-79 Low
No
No
 - 14.04.2020 SB2020041404
#VU15857 - Memory corruption
CVE-2018-8575		 CWE-119 High
No
No
 - 13.11.2018 SB2018111324
#VU12496 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-8156		 CWE-79 Low
No
No
 - 08.05.2018 SB2018050824
SB2018050825
#VU11023 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-0944		 CWE-79 Low
No
No
 - 13.03.2018 SB2018031310
SB2018031312
#VU11020 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-0916		 CWE-79 Low
No
No
 - 13.03.2018 SB2018031310
SB2018031312
#VU11018 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-0915		 CWE-79 Low
No
No
 - 13.03.2018 SB2018031310
SB2018031312
#VU11017 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-0914		 CWE-79 Low
No
No
 - 13.03.2018 SB2018031310
SB2018031312
#VU11016 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-0913		 CWE-79 Low
No
No
 - 13.03.2018 SB2018031310
SB2018031312
#VU11015 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-0912		 CWE-79 Low
No
No
 - 13.03.2018 SB2018031310
SB2018031312
#VU11014 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-0911		 CWE-79 Low
No
No
 - 13.03.2018 SB2018031310
SB2018031312
#VU11013 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-0910		 CWE-79 Low
No
No
 - 13.03.2018 SB2018031310
SB2018031312
#VU11011 - Permissions, Privileges, and Access Controls
CVE-2018-0947		 CWE-264 Low
No
No
 - 13.03.2018 SB2018031310
SB2018031312
#VU11012 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-0909		 CWE-79 Low
No
No
 - 13.03.2018 SB2018031310
SB2018031312
#VU10529 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-0864		 CWE-79 Low
No
No
 - 13.02.2018 SB2018021312
SB2018021313
#VU9314 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-11876		 CWE-79 Low
No
No
 - 14.11.2017 SB2017111424
SB2017111425
#VU7093 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-8551		 CWE-79 Low
No
No
 - 14.06.2017 SB2017061503