Known vulnerabilities in Microsoft SharePoint Foundation 2013 - page 4

Vendor: Microsoft
Software: Microsoft SharePoint Foundation
Version: 2013
Software CPE: cpe:2.3:a:microsoft:microsoft_sharepoint_foundation:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 153
Public exploits: 10
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Microsoft SharePoint Foundation version 2013 Microsoft SharePoint Foundation 2013 is affected by 153 vulnerabilities: 21 high, 79 medium, 53 low Critical High Medium Low

Vulnerabilities (153)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU46413 - Improper input validation
CVE-2020-1453		 CWE-20 Medium
No
No
 - 08.09.2020 SB2020090815
#VU46408 - Improper input validation
CVE-2020-1576		 CWE-20 Medium
No
No
 - 08.09.2020 SB2020090815
#VU46406 - Improper input validation
CVE-2020-1200		 CWE-20 Medium
No
No
 - 08.09.2020 SB2020090815
#VU46405 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2020-1205		 CWE-451 Medium
No
No
 - 08.09.2020 SB2020090815
#VU46398 - Improper input validation
CVE-2020-1595		 CWE-20 Medium
No
No
 - 08.09.2020 SB2020090815
#VU46392 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-1345		 CWE-79 Low
No
No
 - 08.09.2020 SB2020090809
#VU46391 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-1575		 CWE-79 Low
No
No
 - 08.09.2020 SB2020090809
#VU46390 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-1198		 CWE-79 Low
No
No
 - 08.09.2020 SB2020090809
#VU46388 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-1482		 CWE-79 Low
No
No
 - 08.09.2020 SB2020090809
#VU46387 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-1514		 CWE-79 Low
No
No
 - 08.09.2020 SB2020090809
#VU45548 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-1573		 CWE-79 Medium
No
No
 - 11.08.2020 SB2020081121
#VU45547 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-1580		 CWE-79 Medium
No
No
 - 11.08.2020 SB2020081121
#VU45546 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-1499		 CWE-79 Low
No
No
 - 11.08.2020 SB2020081121
#VU45544 - Out-of-bounds read
CVE-2020-1505		 CWE-125 Medium
No
No
 - 11.08.2020 SB2020081121
#VU45543 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-1501		 CWE-79 Low
No
No
 - 11.08.2020 SB2020081121
#VU29774 - XML Injection
CVE-2020-1439		 CWE-91 High
No
No
 - 14.07.2020 SB2020071426
#VU29764 - Improper input validation
CVE-2020-1444		 CWE-20 High
Public exploit available
No
 - 14.07.2020 SB2020071422
#VU29763 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2020-1443		 CWE-451 Medium
No
No
 - 14.07.2020 SB2020071422
#VU29729 - Memory corruption
CVE-2020-1025		 CWE-119 Low
No
No
 - 14.07.2020 SB2020071415
#VU28874 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2020-1323		 CWE-601 Medium
No
No
 - 09.06.2020 SB2020060942


Showing elements 61 - 80 out of 153