Known vulnerabilities in Microsoft SharePoint Foundation 2013

Vendor: Microsoft
Software: Microsoft SharePoint Foundation
Version: 2013
Software CPE: cpe:2.3:a:microsoft:microsoft_sharepoint_foundation:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 153
Public exploits: 10
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Microsoft SharePoint Foundation version 2013 Microsoft SharePoint Foundation 2013 is affected by 153 vulnerabilities: 21 high, 79 medium, 53 low Critical High Medium Low

Vulnerabilities (153)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU72229 - Improper Access Control
CVE-2023-21717		 CWE-284 Medium
No
No
 - 15.02.2023 SB2023021512
#VU59476 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-21840		 CWE-94 High
No
No
 - 11.01.2022 SB2022011159
#VU59440 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-21837		 CWE-94 Medium
No
No
 - 11.01.2022 SB2022011131
#VU58915 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-43242		 CWE-451 Medium
No
No
 - 14.12.2021 SB2021121449
#VU58912 - Improper input validation
CVE-2021-42309		 CWE-20 High
No
No
 - 14.12.2021 SB2021121449
#VU58911 - Improper input validation
CVE-2021-42294		 CWE-20 High
No
No
 - 14.12.2021 SB2021121449
#VU57248 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-41344		 CWE-94 Medium
No
No
 - 12.10.2021 SB2021101210
#VU57246 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-40484		 CWE-451 Medium
No
No
 - 12.10.2021 SB2021101210
#VU57245 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-40487		 CWE-94 Medium
No
No
 - 12.10.2021 SB2021101210
#VU56499 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-38651		 CWE-451 Medium
No
No
 - 14.09.2021 SB2021091416
#VU56498 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-38652		 CWE-451 Low
No
No
 - 14.09.2021 SB2021091416
#VU54755 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-34467		 CWE-94 Medium
No
No
 - 13.07.2021 SB2021071338
#VU54754 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-34468		 CWE-94 Medium
No
No
 - 13.07.2021 SB2021071338
#VU54753 - Improper Validation of Integrity Check Value
CVE-2021-34519		 CWE-354 Medium
No
No
 - 13.07.2021 SB2021071338
#VU54752 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-34520		 CWE-94 Medium
No
No
 - 13.07.2021 SB2021071338
#VU54751 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-34517		 CWE-451 Medium
No
No
 - 13.07.2021 SB2021071338
#VU53878 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-31963		 CWE-94 Medium
No
No
 - 08.06.2021 SB2021060805
#VU53877 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-26420		 CWE-94 Medium
No
No
 - 08.06.2021 SB2021060805
#VU53876 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-31964		 CWE-451 Medium
No
No
 - 08.06.2021 SB2021060805
#VU53872 - Exposure of sensitive information to an unauthorized actor
CVE-2021-31965		 CWE-200 Medium
No
No
 - 08.06.2021 SB2021060805


Showing elements 1 - 20 out of 153