Known vulnerabilities in Microsoft SharePoint Server 2010 - page 2

Vendor: Microsoft
Software: Microsoft SharePoint Server
Version: 2010
Software CPE: cpe:2.3:a:microsoft:microsoft_sharepoint_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 61
Public exploits: 5
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Microsoft SharePoint Server version 2010 Microsoft SharePoint Server 2010 is affected by 61 vulnerabilities: 2 critical, 25 high, 13 medium, 21 low Critical High Medium Low

Vulnerabilities (61)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU29772 - Memory corruption
CVE-2020-1446		 CWE-119 High
No
No
 - 14.07.2020 SB2020071424
#VU29771 - Memory corruption
CVE-2020-1447		 CWE-119 High
No
No
 - 14.07.2020 SB2020071424
#VU29734 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-1451		 CWE-79 Low
No
No
 - 14.07.2020 SB2020071415
#VU29733 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-1450		 CWE-79 Low
No
No
 - 14.07.2020 SB2020071415
#VU29732 - Out-of-bounds read
CVE-2020-1445		 CWE-125 Medium
No
No
 - 14.07.2020 SB2020071415
#VU29731 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-1456		 CWE-79 Low
No
No
 - 14.07.2020 SB2020071415
#VU29730 - Out-of-bounds read
CVE-2020-1342		 CWE-125 Medium
No
No
 - 14.07.2020 SB2020071415
#VU28831 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2020-1148		 CWE-451 Medium
No
No
 - 09.06.2020 SB2020060918
#VU28830 - Server-Side Request Forgery (SSRF)
CVE-2020-1178		 CWE-918 High
No
No
 - 09.06.2020 SB2020060918
#VU28804 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-1320		 CWE-79 Low
No
No
 - 09.06.2020 SB2020060914
#VU27755 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-1100		 CWE-79 Low
No
No
 - 12.05.2020 SB2020051220
#VU26878 - Memory corruption
CVE-2020-0980		 CWE-119 High
No
No
 - 14.04.2020 SB2020041435
#VU26787 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-0973		 CWE-79 Low
No
No
 - 14.04.2020 SB2020041404
#VU25917 - Memory corruption
CVE-2020-0892		 CWE-119 High
No
No
 - 10.03.2020 SB2020031026
#VU20261 - Stack-based buffer overflow
CVE-2019-1201		 CWE-121 High
No
No
 - 14.08.2019 SB2019081403
SB2019081404
#VU18782 - Memory corruption
CVE-2019-1034		 CWE-119 High
No
No
 - 12.06.2019 SB2019061206
#VU18202 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-0831		 CWE-79 Low
No
No
 - 10.04.2019 SB2019041015
#VU17627 - Improper Control of Generation of Code ('Code Injection')
CVE-2019-0594		 CWE-94 Medium
No
No
 - 13.02.2019 SB2019021307
#VU17622 - Improper Control of Generation of Code ('Code Injection')
CVE-2019-0604		 CWE-94 High
Public exploit available
Exploited
 - 13.02.2019 SB2019021307
#VU16449 - Permissions, Privileges, and Access Controls
CVE-2018-8635		 CWE-264 High
No
No
 - 11.12.2018 SB2018121104


Showing elements 21 - 40 out of 61