Known vulnerabilities in Microsoft SharePoint Foundation - page 2

Vendor: Microsoft
Software: Microsoft SharePoint Foundation
Software CPE: cpe:2.3:a:microsoft:microsoft_sharepoint_foundation:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 178
Public exploits: 12
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft SharePoint Foundation Microsoft SharePoint Foundation is affected by 178 known vulnerabilities: 22 high, 100 medium, 56 low Critical High Medium Low

Vulnerabilities (178)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU62095 - Use After Free
CVE-2022-26901		 CWE-416 High
No
No
 - 12.04.2022 SB2022041224
#VU60416 - Security Features
CVE-2022-21968		 CWE-254 Low
No
No
 - 08.02.2022 SB2022020838
#VU59476 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-21840		 CWE-94 High
No
No
 - 11.01.2022 SB2022011159
#VU59440 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-21837		 CWE-94 Medium
No
No
 - 11.01.2022 SB2022011131
#VU58915 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-43242		 CWE-451 Medium
No
No
 - 14.12.2021 SB2021121449
#VU58912 - Improper input validation
CVE-2021-42309		 CWE-20 High
No
No
 - 14.12.2021 SB2021121449
#VU58911 - Improper input validation
CVE-2021-42294		 CWE-20 High
No
No
 - 14.12.2021 SB2021121449
#VU57248 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-41344		 CWE-94 Medium
No
No
 - 12.10.2021 SB2021101210
#VU57246 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-40484		 CWE-451 Medium
No
No
 - 12.10.2021 SB2021101210
#VU57245 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-40487		 CWE-94 Medium
No
No
 - 12.10.2021 SB2021101210
#VU56499 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-38651		 CWE-451 Medium
No
No
 - 14.09.2021 SB2021091416
#VU56498 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-38652		 CWE-451 Low
No
No
 - 14.09.2021 SB2021091416
#VU54755 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-34467		 CWE-94 Medium
No
No
 - 13.07.2021 SB2021071338
#VU54754 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-34468		 CWE-94 Medium
No
No
 - 13.07.2021 SB2021071338
#VU54753 - Improper Validation of Integrity Check Value
CVE-2021-34519		 CWE-354 Medium
No
No
 - 13.07.2021 SB2021071338
#VU54752 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-34520		 CWE-94 Medium
No
No
 - 13.07.2021 SB2021071338
#VU54751 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-34517		 CWE-451 Medium
No
No
 - 13.07.2021 SB2021071338
#VU53878 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-31963		 CWE-94 Medium
No
No
 - 08.06.2021 SB2021060805
#VU53877 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-26420		 CWE-94 Medium
No
No
 - 08.06.2021 SB2021060805
#VU53872 - Exposure of sensitive information to an unauthorized actor
CVE-2021-31965		 CWE-200 Medium
No
No
 - 08.06.2021 SB2021060805


Showing elements 21 - 40 out of 178