Known vulnerabilities in Microsoft SharePoint Foundation

Vendor: Microsoft
Software: Microsoft SharePoint Foundation
Software CPE: cpe:2.3:a:microsoft:microsoft_sharepoint_foundation:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 178
Public exploits: 12
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft SharePoint Foundation Microsoft SharePoint Foundation is affected by 178 known vulnerabilities: 22 high, 100 medium, 56 low Critical High Medium Low

Vulnerabilities (178)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU74976 - Server-Side Request Forgery (SSRF)
CVE-2023-28288		 CWE-918 Medium
Available
No
 - 11.04.2023 SB2023041195
#VU73599 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2023-23395		 CWE-451 Low
No
No
 - 14.03.2023 SB2023031458
#VU72229 - Improper Access Control
CVE-2023-21717		 CWE-284 Medium
No
No
 - 15.02.2023 SB2023021512
#VU70958 - Improper input validation
CVE-2023-21742		 CWE-20 Medium
Available
No
 - 10.01.2023 SB2023011051
#VU70957 - Improper input validation
CVE-2023-21744		 CWE-20 Medium
No
No
 - 10.01.2023 SB2023011051
#VU70219 - Improper input validation
CVE-2022-44693		 CWE-20 Medium
No
No
 - 13.12.2022 SB2022121381
#VU70218 - Improper input validation
CVE-2022-44690		 CWE-20 Medium
No
No
 - 13.12.2022 SB2022121381
#VU69069 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2022-41122		 CWE-451 Medium
No
No
 - 08.11.2022 SB2022110807
#VU69068 - Improper input validation
CVE-2022-41062		 CWE-20 Medium
No
No
 - 08.11.2022 SB2022110807
#VU68220 - Improper input validation
CVE-2022-41037		 CWE-20 Medium
No
No
 - 12.10.2022 SB2022101213
#VU68219 - Improper input validation
CVE-2022-41036		 CWE-20 Medium
No
No
 - 12.10.2022 SB2022101213
#VU68218 - Improper input validation
CVE-2022-41038		 CWE-20 Medium
No
No
 - 12.10.2022 SB2022101213
#VU68217 - Improper input validation
CVE-2022-38053		 CWE-20 Medium
No
No
 - 12.10.2022 SB2022101213
#VU67284 - Improper input validation
CVE-2022-37961		 CWE-20 Medium
No
No
 - 13.09.2022 SB2022091379
#VU67283 - Improper input validation
CVE-2022-38009		 CWE-20 Medium
No
No
 - 13.09.2022 SB2022091379
#VU67282 - Improper input validation
CVE-2022-38008		 CWE-20 Medium
No
No
 - 13.09.2022 SB2022091379
#VU67281 - Deserialization of Untrusted Data
CVE-2022-35823		 CWE-502 Medium
No
No
 - 13.09.2022 SB2022091379
#VU64373 - Improper input validation
CVE-2022-30158		 CWE-20 Medium
No
No
 - 14.06.2022 SB2022061461
#VU62963 - Improper input validation
CVE-2022-29108		 CWE-20 Medium
No
No
 - 10.05.2022 SB2022051025
#VU62149 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2022-24472		 CWE-451 Medium
No
No
 - 12.04.2022 SB2022041247


Showing elements 1 - 20 out of 178