Known vulnerabilities in Microsoft SharePoint Server 2010

Vendor: Microsoft
Software: Microsoft SharePoint Server
Version: 2010
Software CPE: cpe:2.3:a:microsoft:microsoft_sharepoint_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 61
Public exploits: 5
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Microsoft SharePoint Server version 2010 Microsoft SharePoint Server 2010 is affected by 61 vulnerabilities: 2 critical, 25 high, 13 medium, 21 low Critical High Medium Low

Vulnerabilities (61)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU52143 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-28453		 CWE-94 High
No
No
 - 13.04.2021 SB2021041329
#VU49431 - Improper input validation
CVE-2021-1716		 CWE-20 High
No
No
 - 12.01.2021 SB2021011228
#VU49430 - Improper input validation
CVE-2021-1715		 CWE-20 High
No
No
 - 12.01.2021 SB2021011228
#VU48843 - Memory corruption
CVE-2020-17122		 CWE-119 High
No
No
 - 08.12.2020 SB2020120818
#VU48302 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2020-17060		 CWE-451 Medium
No
No
 - 10.11.2020 SB2020111044
#VU48300 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2020-17016		 CWE-451 Medium
No
No
 - 10.11.2020 SB2020111044
#VU47583 - Memory corruption
CVE-2020-16929		 CWE-119 High
No
No
 - 13.10.2020 SB2020101337
#VU46472 - Memory corruption
CVE-2020-1218		 CWE-119 High
No
No
 - 08.09.2020 SB2020090841
#VU46408 - Improper input validation
CVE-2020-1576		 CWE-20 Medium
No
No
 - 08.09.2020 SB2020090815
#VU46402 - Improper input validation
CVE-2020-1210		 CWE-20 Medium
No
No
 - 08.09.2020 SB2020090815
#VU46400 - Improper input validation
CVE-2020-1440		 CWE-20 Medium
No
No
 - 08.09.2020 SB2020090815
#VU45547 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-1580		 CWE-79 Medium
No
No
 - 11.08.2020 SB2020081121
#VU45545 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-1500		 CWE-79 Low
No
No
 - 11.08.2020 SB2020081121
#VU45544 - Out-of-bounds read
CVE-2020-1505		 CWE-125 Medium
No
No
 - 11.08.2020 SB2020081121
#VU45543 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-1501		 CWE-79 Low
No
No
 - 11.08.2020 SB2020081121
#VU45533 - Out-of-bounds read
CVE-2020-1583		 CWE-125 Low
No
No
 - 11.08.2020 SB2020081117
#VU45532 - Out-of-bounds read
CVE-2020-1503		 CWE-125 Low
No
No
 - 11.08.2020 SB2020081117
#VU45525 - Memory corruption
CVE-2020-1495		 CWE-119 High
No
No
 - 11.08.2020 SB2020081116
#VU29836 - XML Injection
CVE-2020-1147		 CWE-91 High
Public exploit available
Exploited
 - 14.07.2020 SB2020071463
SB20200716119
SB20200716120
and 6 more
#VU29774 - XML Injection
CVE-2020-1439		 CWE-91 High
No
No
 - 14.07.2020 SB2020071426


Showing elements 1 - 20 out of 61