Known vulnerabilities in Microsoft SharePoint Foundation - page 9

Vendor: Microsoft
Software: Microsoft SharePoint Foundation
Software CPE: cpe:2.3:a:microsoft:microsoft_sharepoint_foundation:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 178
Public exploits: 12
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft SharePoint Foundation Microsoft SharePoint Foundation is affected by 178 known vulnerabilities: 22 high, 100 medium, 56 low Critical High Medium Low

Vulnerabilities (178)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU18463 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-0958		 CWE-79 Medium
No
No
 - 15.05.2019 SB2019051504
#VU18462 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-0956		 CWE-79 Medium
No
No
 - 15.05.2019 SB2019051504
#VU18202 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-0831		 CWE-79 Low
No
No
 - 10.04.2019 SB2019041015
#VU18201 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-0830		 CWE-79 Low
No
No
 - 10.04.2019 SB2019041015
#VU17952 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-0778		 CWE-79 Medium
No
No
 - 13.03.2019 SB2019031302
#VU17627 - Improper Control of Generation of Code ('Code Injection')
CVE-2019-0594		 CWE-94 Medium
No
No
 - 13.02.2019 SB2019021307
#VU17626 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2019-0670		 CWE-601 Low
No
No
 - 13.02.2019 SB2019021307
#VU17622 - Improper Control of Generation of Code ('Code Injection')
CVE-2019-0604		 CWE-94 High
Available
Exploited
 - 13.02.2019 SB2019021307
#VU13771 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-8299		 CWE-79 Low
No
No
 - 10.07.2018 SB2018071010
#VU13772 - Improper input validation
CVE-2018-8300		 CWE-20 High
No
No
 - 10.07.2018 SB2018071010
#VU13288 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-8254		 CWE-79 Low
No
No
 - 12.06.2018 SB2018061211
#VU13289 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-8252		 CWE-79 Low
No
No
 - 12.06.2018 SB2018061211
#VU12495 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-8155		 CWE-79 Low
No
No
 - 08.05.2018 SB2018050824
#VU11011 - Permissions, Privileges, and Access Controls
CVE-2018-0947		 CWE-264 Low
No
No
 - 13.03.2018 SB2018031310
SB2018031312
#VU8253 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-8745		 CWE-79 Low
No
No
 - 12.09.2017 SB2017091209
#VU6463 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-0255		 CWE-79 Low
No
No
 - 09.05.2017 SB2017050907
#VU6456 - Memory corruption
CVE-2017-0281		 CWE-119 High
No
No
 - 09.05.2017 SB2017050906
#VU5564 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2015-2522		 CWE-79 Low
No
No
 - 31.01.2017 SB2015090801
SB2015090805


Showing elements 161 - 180 out of 178