Known vulnerabilities in Microsoft SharePoint Foundation 2010 Service Pack 2 - page 2

Vendor: Microsoft
Version: 2010 Service Pack 2
Software CPE: cpe:2.3:a:microsoft:microsoft_sharepoint_foundation:*:*:*:*:*:*:*:*
Total vulnerabilities: 52
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Microsoft SharePoint Foundation version 2010 Service Pack 2 Microsoft SharePoint Foundation 2010 Service Pack 2 is affected by 52 vulnerabilities: 5 high, 29 medium, 18 low Critical High Medium Low

Vulnerabilities (52)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU46414 - Improper input validation
CVE-2020-1452
CWE-20 Medium
No
No
- 08.09.2020 SB2020090815
#VU46413 - Improper input validation
CVE-2020-1453
CWE-20 Medium
No
No
- 08.09.2020 SB2020090815
#VU46406 - Improper input validation
CVE-2020-1200
CWE-20 Medium
No
No
- 08.09.2020 SB2020090815
#VU46405 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2020-1205
CWE-451 Medium
No
No
- 08.09.2020 SB2020090815
#VU46392 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-1345
CWE-79 Low
No
No
- 08.09.2020 SB2020090809
#VU46388 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-1482
CWE-79 Low
No
No
- 08.09.2020 SB2020090809
#VU45548 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-1573
CWE-79 Medium
No
No
- 11.08.2020 SB2020081121
#VU45546 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-1499
CWE-79 Low
No
No
- 11.08.2020 SB2020081121
#VU28833 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2020-1289
CWE-451 Medium
No
No
- 09.06.2020 SB2020060918
#VU28829 - Improper input validation
CVE-2020-1181
CWE-20 Medium
No
No
- 09.06.2020 SB2020060918
#VU28807 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-1318
CWE-79 Low
No
No
- 09.06.2020 SB2020060914
#VU28806 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-1297
CWE-79 Low
No
No
- 09.06.2020 SB2020060914
#VU28803 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-1298
CWE-79 Low
No
No
- 09.06.2020 SB2020060914
#VU26828 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2020-0975
CWE-451 Medium
No
No
- 14.04.2020 SB2020041410
#VU26826 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2020-0972
CWE-451 Medium
No
No
- 14.04.2020 SB2020041410
#VU26825 - Improper input validation
CVE-2020-0971
CWE-20 High
No
No
- 14.04.2020 SB2020041410
#VU26822 - Improper input validation
CVE-2020-0929
CWE-20 High
No
No
- 14.04.2020 SB2020041410
#VU26821 - Improper input validation
CVE-2020-0920
CWE-20 High
No
No
- 14.04.2020 SB2020041410
#VU26781 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-0925
CWE-79 Low
No
No
- 14.04.2020 SB2020041404
#VU25905 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-0894
CWE-79 Low
No
No
- 10.03.2020 SB2020031022


Showing elements 21 - 40 out of 52