Known vulnerabilities in Microsoft SharePoint Foundation - page 7

Vendor: Microsoft
Software: Microsoft SharePoint Foundation
Software CPE: cpe:2.3:a:microsoft:microsoft_sharepoint_foundation:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 178
Public exploits: 12
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft SharePoint Foundation Microsoft SharePoint Foundation is affected by 178 known vulnerabilities: 22 high, 100 medium, 56 low Critical High Medium Low

Vulnerabilities (178)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU26829 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2020-0976		 CWE-451 Medium
Available
No
 - 14.04.2020 SB2020041410
#VU26828 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2020-0975		 CWE-451 Medium
No
No
 - 14.04.2020 SB2020041410
#VU26826 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2020-0972		 CWE-451 Medium
No
No
 - 14.04.2020 SB2020041410
#VU26825 - Improper input validation
CVE-2020-0971		 CWE-20 High
No
No
 - 14.04.2020 SB2020041410
#VU26824 - Improper input validation
CVE-2020-0932		 CWE-20 High
No
No
 - 14.04.2020 SB2020041410
#VU26823 - Improper input validation
CVE-2020-0931		 CWE-20 High
No
No
 - 14.04.2020 SB2020041410
#VU26822 - Improper input validation
CVE-2020-0929		 CWE-20 High
No
No
 - 14.04.2020 SB2020041410
#VU26821 - Improper input validation
CVE-2020-0920		 CWE-20 High
No
No
 - 14.04.2020 SB2020041410
#VU26788 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-0978		 CWE-79 Low
No
No
 - 14.04.2020 SB2020041404
#VU26785 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-0933		 CWE-79 Low
No
No
 - 14.04.2020 SB2020041404
#VU26781 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-0925		 CWE-79 Low
No
No
 - 14.04.2020 SB2020041404
#VU26780 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-0924		 CWE-79 Low
No
No
 - 14.04.2020 SB2020041404
#VU26779 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-0923		 CWE-79 Low
No
No
 - 14.04.2020 SB2020041404
#VU25917 - Memory corruption
CVE-2020-0892		 CWE-119 High
No
No
 - 10.03.2020 SB2020031026
#VU25913 - Memory corruption
CVE-2020-0850		 CWE-119 High
No
No
 - 10.03.2020 SB2020031026
#VU25907 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-0795		 CWE-79 Low
No
No
 - 10.03.2020 SB2020031022
#VU25905 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-0894		 CWE-79 Low
No
No
 - 10.03.2020 SB2020031022
#VU25902 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-0891		 CWE-79 Low
No
No
 - 10.03.2020 SB2020031022
#VU24028 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2019-1491		 CWE-22 Medium
No
No
 - 07.01.2020 SB2020010702
#VU22697 - Unrestricted Upload of File with Dangerous Type
CVE-2019-1443		 CWE-434 Medium
No
No
 - 12.11.2019 SB2019111212


Showing elements 121 - 140 out of 178