Where
-Infinity
0

Trending

Last week
Last month
Last year

Microsoft SharePoint Enterprise ServerMicrosoft Office SharePoint XSS Vulnerability

Risk 34
Severity
5.4
XSS
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1099, CVE-2020-1101, CVE-2020-1106.

1 / 3
First published (updated )
CVE-2020-1100

Microsoft OfficeMicrosoft Excel Remote Code Execution Vulnerability

Risk 79
Severity
7.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Microsoft Excel Remote Code Execution Vulnerability

1 / 2
Source: NVD
First published (updated )
CVE-2020-17122

Microsoft Word 2016Microsoft Word Remote Code Execution Vulnerability

Risk 59
Severity
7.3
Input Validation
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L/E:U/RL:O/RC:C

Microsoft Word Remote Code Execution Vulnerability

First published (updated )
CVE-2023-36762

Microsoft SharePoint Server 2019Microsoft SharePoint Server Elevation of Privilege Vulnerability

Risk 79
Severity
8.8
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Microsoft SharePoint Server Elevation of Privilege Vulnerability

First published (updated )
CVE-2023-36764

Microsoft SharePoint Server Subscription EditionMicrosoft SharePoint Server Remote Code Execution Vulnerability

Risk 62
Severity
6.8
AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C

Microsoft SharePoint Server Remote Code Execution Vulnerability

1 / 3
Source: Microsoft
First published (updated )
CVE-2023-38177

Microsoft SharePoint Server 2019Microsoft SharePoint Server Remote Code Execution Vulnerability

Risk 79
Severity
8.8
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Microsoft SharePoint Server Remote Code Execution Vulnerability

First published (updated )
CVE-2022-44693

Microsoft SharePoint Server 2019Microsoft SharePoint Server Remote Code Execution Vulnerability

Risk 79
Severity
8.8
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Microsoft SharePoint Server Remote Code Execution Vulnerability

First published (updated )
CVE-2022-44690

Microsoft SharePoint Server 2019Microsoft SharePoint Server Information Disclosure Vulnerability

Risk 38
Severity
6.5
SSRF
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

Microsoft SharePoint Server Information Disclosure Vulnerability

First published (updated )
CVE-2023-24954

Microsoft SharePoint Server 2019Microsoft SharePoint Server Spoofing Vulnerability

Risk 38
Severity
6.5
Input Validation
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

Microsoft SharePoint Server Spoofing Vulnerability

First published (updated )
CVE-2023-24950

Microsoft Office Mac Os XMicrosoft Word Table Out-Of-Bounds Access Remote Code Execution Vulnerability

Risk 80
Severity
9.3
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1034.

1 / 4
First published (updated )
CVE-2019-1035

Microsoft Project Server 2010Microsoft Office SharePoint XSS Vulnerability

Risk 34
Severity
5.4
XSS
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2019-1031, CVE-2019-1032, CVE-2019-1033.

1 / 3
First published (updated )
CVE-2019-1036

Microsoft SharePoint Enterprise Server 2016Microsoft Office SharePoint XSS Vulnerability

Risk 34
Severity
5.4
XSS
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2019-1032, CVE-2019-1033, CVE-2019-1036.

1 / 3
First published (updated )
CVE-2019-1031

Microsoft Project Server 2010Microsoft Office SharePoint XSS Vulnerability

Risk 34
Severity
5.4
XSS
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2019-1031, CVE-2019-1032, CVE-2019-1036.

1 / 3
First published (updated )
CVE-2019-1033

Microsoft OfficeMicrosoft Word Remote Code Execution Vulnerability

Risk 79
Severity
9.3
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1035.

1 / 3
First published (updated )
CVE-2019-1034

Microsoft SharePoint Enterprise ServerMicrosoft Office SharePoint XSS Vulnerability

Risk 34
Severity
5.4
XSS
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2019-1031, CVE-2019-1033, CVE-2019-1036.

1 / 3
First published (updated )
CVE-2019-1032

Microsoft SharePoint Server 2019Microsoft SharePoint Server Remote Code Execution Vulnerability

Risk 51
Severity
7.8
EPSS
0.05%
Use After Free
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Microsoft SharePoint Server Remote Code Execution Vulnerability

First published (updated )
CVE-2024-21426

Microsoft SharePoint Server 2019Microsoft SharePoint Server Spoofing Vulnerability

Risk 51
Severity
6.8
XSS
AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:H/RL:O/RC:C

Microsoft SharePoint Server Spoofing Vulnerability

First published (updated )
CVE-2024-26251

Microsoft SharePoint Server 2019Microsoft SharePoint Server Information Disclosure Vulnerability

Risk 43
Severity
7.5
XEE
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

Microsoft SharePoint Server Information Disclosure Vulnerability

First published (updated )
CVE-2024-30043

Microsoft SharePoint Server Subscription EditionMicrosoft SharePoint Server Remote Code Execution Vulnerability

Risk 70
Severity
7.2
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Microsoft SharePoint Server Remote Code Execution Vulnerability

First published (updated )
CVE-2024-30044

VirtoSoftware Sharepoint Bulk File DownloadInfoleak

Risk 27
Severity
5.3
Infoleak
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

An issue was discovered in VirtoSoftware Virto Bulk File Download 5.5.44 for SharePoint 2019. It discloses full pathnames via Virto.SharePoint.FileDownloader/Api/Download.ashx?action=archive.

First published (updated )
CVE-2024-33880

Microsoft SharePoint Server Subscription EditionMicrosoft SharePoint Server Remote Code Execution Vulnerability

Risk 79
Severity
8.8
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Microsoft SharePoint Server Remote Code Execution Vulnerability

First published (updated )
CVE-2022-37961

Microsoft SharePoint Foundation 2013Microsoft SharePoint Server Remote Code Execution Vulnerability

Risk 79
Severity
8.8
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Microsoft SharePoint Server Remote Code Execution Vulnerability

First published (updated )
CVE-2022-38009

Microsoft SharePoint Foundation 2013Microsoft SharePoint Remote Code Execution Vulnerability

Risk 79
Severity
8.8
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Microsoft SharePoint Remote Code Execution Vulnerability

First published (updated )
CVE-2022-35823

Microsoft SharePoint Server 2019Microsoft SharePoint Server Remote Code Execution Vulnerability

Risk 79
Severity
8.8
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Microsoft SharePoint Server Remote Code Execution Vulnerability

First published (updated )
CVE-2022-38008

Microsoft SharePoint FoundationMicrosoft SharePoint Server Spoofing Vulnerability

Risk 47
Severity
7.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N

Microsoft SharePoint Server Spoofing Vulnerability

First published (updated )
CVE-2021-31172

Microsoft SharePoint Server 2019Microsoft SharePoint WebPart Interpretation Conflict Remote Code Execution Vulnerability

Risk 81
Severity
8.8
Code Injection
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Microsoft SharePoint Remote Code Execution Vulnerability

1 / 2
First published (updated )
CVE-2021-31181

Microsoft SharePoint FoundationMicrosoft SharePoint Server Spoofing Vulnerability

Risk 49
Severity
7.6
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N

Microsoft SharePoint Server Spoofing Vulnerability

First published (updated )
CVE-2021-28478

Microsoft SharePoint Enterprise ServerXSS

Risk 34
Severity
5.4
XSS
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0923, CVE-2020-0924, CVE-2020-0925, CVE-2020-0926, CVE-2020-0927, CVE-2020-0930, CVE-2020-0954, CVE-2020-0973, CVE-2020-0978.

First published (updated )
CVE-2020-0933

Microsoft SharePoint Enterprise ServerXSS

Risk 34
Severity
5.4
XSS
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1450, CVE-2020-1451.

First published (updated )
CVE-2020-1456

Microsoft SharePoint Enterprise ServerXSS

Risk 34
Severity
5.4
XSS
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0923, CVE-2020-0924, CVE-2020-0925, CVE-2020-0926, CVE-2020-0930, CVE-2020-0933, CVE-2020-0954, CVE-2020-0973, CVE-2020-0978.

First published (updated )
CVE-2020-0927

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203