Known vulnerabilities in Microsoft SharePoint Foundation - page 3

Vendor: Microsoft
Software CPE: cpe:2.3:a:microsoft:microsoft_sharepoint_foundation:*:*:*:*:*:*:*:*
Total vulnerabilities: 178
Public exploits: 12
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft SharePoint Foundation Microsoft SharePoint Foundation is affected by 178 known vulnerabilities: 22 high, 100 medium, 56 low Critical High Medium Low

Vulnerabilities (178)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU53876 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-31964
CWE-451 Medium
No
No
- 08.06.2021 SB2021060805
#VU53875 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-31950
CWE-451 Medium
Available
No
- 08.06.2021 SB2021060805
#VU53874 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-31948
CWE-451 Medium
No
No
- 08.06.2021 SB2021060805
#VU53873 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-31966
CWE-94 Low
No
No
- 08.06.2021 SB2021060805
#VU53081 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-31181
CWE-94 Medium
Available
No
- 11.05.2021 SB2021051111
#VU53080 - Exposure of sensitive information to an unauthorized actor
CVE-2021-31173
CWE-200 Medium
No
No
- 11.05.2021 SB2021051111
#VU53079 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-31172
CWE-451 Medium
No
No
- 11.05.2021 SB2021051111
#VU53078 - Exposure of sensitive information to an unauthorized actor
CVE-2021-31171
CWE-200 Low
No
No
- 11.05.2021 SB2021051111
#VU53077 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-26418
CWE-451 Medium
No
No
- 11.05.2021 SB2021051111
#VU53076 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-28478
CWE-451 Medium
No
No
- 11.05.2021 SB2021051111
#VU53075 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-28474
CWE-94 Medium
No
No
- 11.05.2021 SB2021051111
#VU52171 - Improper input validation
CVE-2021-28450
CWE-20 Medium
No
No
- 13.04.2021 SB2021041353
#VU51301 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-24104
CWE-451 Low
No
No
- 09.03.2021 SB2021030919
#VU51300 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-27076
CWE-94 Medium
No
No
- 09.03.2021 SB2021030919
#VU50470 - Improper input validation
CVE-2021-24066
CWE-20 Medium
No
No
- 09.02.2021 SB2021020930
#VU50469 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-1726
CWE-451 Medium
No
No
- 09.02.2021 SB2021020930
#VU50468 - Improper input validation
CVE-2021-24072
CWE-20 Medium
No
No
- 09.02.2021 SB2021020930
#VU50467 - Exposure of sensitive information to an unauthorized actor
CVE-2021-24071
CWE-200 Medium
No
No
- 09.02.2021 SB2021020930
#VU49396 - Permissions, Privileges, and Access Controls
CVE-2021-1718
CWE-264 Medium
No
No
- 12.01.2021 SB2021011211
#VU49395 - Improper input validation
CVE-2021-1707
CWE-20 Medium
No
No
- 12.01.2021 SB2021011211


Showing elements 41 - 60 out of 178