Known vulnerabilities in Microsoft SharePoint Foundation - page 4

Vendor: Microsoft
Software: Microsoft SharePoint Foundation
Software CPE: cpe:2.3:a:microsoft:microsoft_sharepoint_foundation:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 178
Public exploits: 12
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft SharePoint Foundation Microsoft SharePoint Foundation is affected by 178 known vulnerabilities: 22 high, 100 medium, 56 low Critical High Medium Low

Vulnerabilities (178)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU49400 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-1641		 CWE-451 Medium
No
No
 - 12.01.2021 SB2021011211
#VU49399 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-1717		 CWE-451 Medium
No
No
 - 12.01.2021 SB2021011211
#VU49397 - Permissions, Privileges, and Access Controls
CVE-2021-1712		 CWE-264 Medium
No
No
 - 12.01.2021 SB2021011211
#VU48841 - Permissions, Privileges, and Access Controls
CVE-2020-17089		 CWE-264 Medium
No
No
 - 08.12.2020 SB2020120817
#VU48839 - Improper input validation
CVE-2020-17118		 CWE-20 High
No
No
 - 08.12.2020 SB2020120817
#VU48838 - Exposure of sensitive information to an unauthorized actor
CVE-2020-17120		 CWE-200 Medium
No
No
 - 08.12.2020 SB2020120817
#VU48837 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2020-17115		 CWE-451 Medium
No
No
 - 08.12.2020 SB2020120817
#VU48836 - Improper input validation
CVE-2020-17121		 CWE-20 Medium
No
No
 - 08.12.2020 SB2020120817
#VU48304 - Exposure of sensitive information to an unauthorized actor
CVE-2020-16979		 CWE-200 Medium
No
No
 - 10.11.2020 SB2020111044
#VU48303 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-17061		 CWE-94 Medium
No
No
 - 10.11.2020 SB2020111044
#VU48301 - Exposure of sensitive information to an unauthorized actor
CVE-2020-17017		 CWE-200 Medium
Available
No
 - 10.11.2020 SB2020111044
#VU48299 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2020-17015		 CWE-451 Low
No
No
 - 10.11.2020 SB2020111044
#VU47582 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-16946		 CWE-79 Low
No
No
 - 13.10.2020 SB2020101336
#VU47581 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-16945		 CWE-79 Low
No
No
 - 13.10.2020 SB2020101336
#VU47576 - Out-of-bounds read
CVE-2020-16953		 CWE-125 Low
No
No
 - 13.10.2020 SB2020101333
#VU47575 - Out-of-bounds read
CVE-2020-16948		 CWE-125 Low
No
No
 - 13.10.2020 SB2020101333
#VU47574 - Exposure of sensitive information to an unauthorized actor
CVE-2020-16942		 CWE-200 Low
No
No
 - 13.10.2020 SB2020101333
#VU47573 - Exposure of sensitive information to an unauthorized actor
CVE-2020-16941		 CWE-200 Low
No
No
 - 13.10.2020 SB2020101333
#VU47572 - Improper input validation
CVE-2020-16952		 CWE-20 High
Available
No
 - 13.10.2020 SB2020101333
#VU47569 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-16944		 CWE-79 Low
No
No
 - 13.10.2020 SB2020101333


Showing elements 61 - 80 out of 178