Known vulnerabilities in Microsoft SharePoint Server 2010 - page 3

Vendor: Microsoft
Software: Microsoft SharePoint Server
Version: 2010
Software CPE: cpe:2.3:a:microsoft:microsoft_sharepoint_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 61
Public exploits: 5
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Microsoft SharePoint Server version 2010 Microsoft SharePoint Server 2010 is affected by 61 vulnerabilities: 2 critical, 25 high, 13 medium, 21 low Critical High Medium Low

Vulnerabilities (61)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU15882 - Memory corruption
CVE-2018-8539		 CWE-119 High
No
No
 - 14.11.2018 SB2018111312
SB2018111408
#VU14776 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-8431		 CWE-79 Low
No
No
 - 13.09.2018 SB2018091302
#VU14774 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-8426		 CWE-79 Low
No
No
 - 13.09.2018 SB2018091302
#VU12497 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-8168		 CWE-79 Low
No
No
 - 08.05.2018 SB2018050824
#VU12498 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-8149		 CWE-79 Low
No
No
 - 08.05.2018 SB2018050824
#VU11738 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-1032		 CWE-79 Low
No
No
 - 10.04.2018 SB2018041032
#VU11053 - Out-of-bounds read
CVE-2018-0919		 CWE-125 Low
No
No
 - 13.03.2018 SB2018031326
#VU11057 - Memory corruption
CVE-2018-0922		 CWE-119 High
No
No
 - 13.03.2018 SB2018031326
#VU9918 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-0790		 CWE-79 Low
No
No
 - 09.01.2018 SB2018010907
#VU9898 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-0789		 CWE-79 Low
No
No
 - 09.01.2018 SB2018010907
SB2018010908
#VU7752 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-8654		 CWE-79 Low
No
No
 - 08.08.2017 SB2017080817
#VU6456 - Memory corruption
CVE-2017-0281		 CWE-119 High
No
No
 - 09.05.2017 SB2017050906
#VU5561 - Missing release of memory after effective lifetime
CVE-2015-2375		 CWE-401 Low
No
No
 - 31.01.2017 SB2015071402
SB2015071405
#VU5554 - Memory corruption
CVE-2015-2376		 CWE-119 High
No
No
 - 31.01.2017 SB2015071402
SB2015071405
#VU5465 - Use After Free
CVE-2015-1650		 CWE-416 High
No
No
 - 27.01.2017 SB2015041401
SB2015041402
#VU5464 - Use After Free
CVE-2015-1649		 CWE-416 High
No
No
 - 27.01.2017 SB2015041401
SB2015041402
#VU5463 - Memory corruption
CVE-2015-1641		 CWE-119 Critical
Public exploit available
Exploited
 - 27.01.2017 SB2015041401
SB2015041402
#VU5288 - Memory corruption
CVE-2015-2468		 CWE-119 High
Public exploit available
No
 - 24.01.2017 SB2015081102
#VU5188 - Memory corruption
CVE-2014-1761		 CWE-119 Critical
Public exploit available
Exploited
 - 20.01.2017 SB2014032401
#VU4754 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2013-1289		 CWE-79 Medium
No
No
 - 16.01.2017 SB2013040901


Showing elements 41 - 60 out of 61