Known vulnerabilities in Microsoft SharePoint Foundation 2013 - page 5

Vendor: Microsoft
Software: Microsoft SharePoint Foundation
Version: 2013
Software CPE: cpe:2.3:a:microsoft:microsoft_sharepoint_foundation:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 153
Public exploits: 10
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Microsoft SharePoint Foundation version 2013 Microsoft SharePoint Foundation 2013 is affected by 153 vulnerabilities: 21 high, 79 medium, 53 low Critical High Medium Low

Vulnerabilities (153)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU28829 - Improper input validation
CVE-2020-1181		 CWE-20 Medium
No
No
 - 09.06.2020 SB2020060918
#VU28807 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-1318		 CWE-79 Low
No
No
 - 09.06.2020 SB2020060914
#VU28806 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-1297		 CWE-79 Low
No
No
 - 09.06.2020 SB2020060914
#VU28805 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-1177		 CWE-79 Low
No
No
 - 09.06.2020 SB2020060914
#VU28804 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-1320		 CWE-79 Low
No
No
 - 09.06.2020 SB2020060914
#VU28803 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-1298		 CWE-79 Low
No
No
 - 09.06.2020 SB2020060914
#VU28802 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-1183		 CWE-79 Low
No
No
 - 09.06.2020 SB2020060914
#VU27756 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-1106		 CWE-79 Low
No
No
 - 12.05.2020 SB2020051220
#VU27754 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-1101		 CWE-79 Low
No
No
 - 12.05.2020 SB2020051220
#VU27740 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2020-1105		 CWE-451 Medium
No
No
 - 12.05.2020 SB2020051219
#VU27738 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2020-1104		 CWE-451 Medium
No
No
 - 12.05.2020 SB2020051219
#VU27737 - Cross-Site Request Forgery (CSRF)
CVE-2020-1103		 CWE-352 Low
Public exploit available
No
 - 12.05.2020 SB2020051219
#VU27735 - Improper input validation
CVE-2020-1069		 CWE-20 Medium
No
No
 - 12.05.2020 SB2020051219
#VU27728 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2020-1107		 CWE-451 Medium
No
No
 - 12.05.2020 SB2020051219
#VU27726 - Improper input validation
CVE-2020-1024		 CWE-20 Medium
No
No
 - 12.05.2020 SB2020051219
#VU27725 - Improper input validation
CVE-2020-1023		 CWE-20 Medium
No
No
 - 12.05.2020 SB2020051219
#VU26829 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2020-0976		 CWE-451 Medium
Public exploit available
No
 - 14.04.2020 SB2020041410
#VU26828 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2020-0975		 CWE-451 Medium
No
No
 - 14.04.2020 SB2020041410
#VU26826 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2020-0972		 CWE-451 Medium
No
No
 - 14.04.2020 SB2020041410
#VU26825 - Improper input validation
CVE-2020-0971		 CWE-20 High
No
No
 - 14.04.2020 SB2020041410


Showing elements 81 - 100 out of 153