Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 229

Export CSV
CVE-2013-0080

Microsoft SharePoint Server 2010 SP1 and SharePoint Foundation 2010 SP1 allow remote attackers to bypass intended read restrictions for content, and hijack user accounts, via a crafted URL, aka "Callback Function Vulnerability."

CVSS 2.0 · 7.5 High EPSS 19.3% KEV · Not listed
Vendors
Microsoft
Products
Sharepoint Foundation Sharepoint Server
CVE-2012-2520

Cross-site scripting (XSS) vulnerability in Microsoft InfoPath 2007 SP2 and SP3 and 2010 SP1, Communicator 2007 R2, Lync 2010 and 2010 Attendee, SharePoint Server 2007 SP2 and SP3 and 2010 SP1, Groove Server 2010 SP1, Windows SharePoint Services 3.0 SP2, SharePoint Foundation 2010 SP1, and Office Web Apps 2010 SP1 allows remote attackers to inject arbitrary web script or HTML via a crafted string, aka "HTML Sanitization Vulnerability."

CVSS 2.0 · 4.3 Medium EPSS 34.3% KEV · Not listed
Vendors
Microsoft
Products
Groove Server Infopath Lync and 5 more
CVE-2012-1863

Cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint Server 2007 SP2 and SP3 Windows SharePoint Services 3.0 SP2, and SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via crafted JavaScript elements in a URL, aka "SharePoint Reflected List Parameter Vulnerability."

CVSS 2.0 · 4.3 Medium EPSS 23.1% KEV · Not listed
Vendors
Microsoft
Products
Office Sharepoint Server Sharepoint Foundation Sharepoint Server and 1 more
CVE-2012-1861

Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 Gold and SP1, SharePoint Foundation 2010 Gold and SP1, and Office Web Apps 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via crafted JavaScript elements in a URL, aka "SharePoint Script in Username Vulnerability."

CVSS 2.0 · 4.3 Medium EPSS 15.4% KEV · Not listed
Vendors
Microsoft
Products
Office Web Apps Sharepoint Foundation Sharepoint Server
CVE-2012-1859

Cross-site scripting (XSS) vulnerability in scriptresx.ashx in Microsoft SharePoint Server 2010 Gold and SP1, SharePoint Foundation 2010 Gold and SP1, and Office Web Apps 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via crafted JavaScript elements in a URL, aka "XSS scriptresx.ashx Vulnerability."

CVSS 2.0 · 4.3 Medium EPSS 23.1% KEV · Not listed
Vendors
Microsoft
Products
Office Web Apps Sharepoint Foundation Sharepoint Server
CVE-2012-0145

Cross-site scripting (XSS) vulnerability in wizardlist.aspx in Microsoft Office SharePoint Server 2010 Gold and SP1 and SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via JavaScript sequences in a URL, aka "XSS in wizardlist.aspx Vulnerability."

CVSS 2.0 · 4.3 Medium EPSS 16.6% KEV · Not listed
Vendors
Microsoft
Products
Sharepoint Foundation Sharepoint Server
CVE-2012-0144

Cross-site scripting (XSS) vulnerability in themeweb.aspx in Microsoft Office SharePoint Server 2010 Gold and SP1 and SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via JavaScript sequences in a URL, aka "XSS in themeweb.aspx Vulnerability."

CVSS 2.0 · 4.3 Medium EPSS 16.6% KEV · Not listed
Vendors
Microsoft
Products
Sharepoint Foundation Sharepoint Server
CVE-2012-0017

Cross-site scripting (XSS) vulnerability in inplview.aspx in Microsoft SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via JavaScript sequences in a URL, aka "XSS in inplview.aspx Vulnerability."

CVSS 2.0 · 4.3 Medium EPSS 16.6% KEV · Not listed
Vendors
Microsoft
Products
Sharepoint Foundation
CVE-2011-1893

Cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint Server 2010, Windows SharePoint Services 2.0 and 3.0 SP2, and SharePoint Foundation 2010 allows remote attackers to inject arbitrary web script or HTML via the URI, aka "SharePoint XSS Vulnerability."

CVSS 2.0 · 4.3 Medium EPSS 16.8% KEV · Not listed
Vendors
Microsoft
Products
Sharepoint Foundation Sharepoint Server Sharepoint Services
CVE-2011-1892

Microsoft Office Groove 2007 SP2, SharePoint Workspace 2010 Gold and SP1, Office Forms Server 2007 SP2, Office SharePoint Server 2007 SP2, Office SharePoint Server 2010 Gold and SP1, Office Groove Data Bridge Server 2007 SP2, Office Groove Management Server 2007 SP2, Groove Server 2010 Gold and SP1, Windows SharePoint Services 3.0 SP2, SharePoint Foundation 2010, and Office Web Apps 2010 Gold and SP1 do not properly handle Web Parts containing XML classes referencing external entities, which allows remote authenticated users to read arbitrary files via a crafted XML and XSL file, aka "SharePoint Remote File Disclosure Vulnerability."

CVSS 2.0 · 4.0 Medium EPSS 41.4% KEV · Not listed
Vendors
Microsoft
Products
Forms Server Groove Groove Data Bridge Server and 7 more
CVE-2011-1891

Cross-site scripting (XSS) vulnerability in Microsoft Windows SharePoint Services 3.0 SP2, and SharePoint Foundation 2010 Gold and SP1, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters in a request to a script, aka "Contact Details Reflected XSS Vulnerability."

CVSS 2.0 · 4.3 Medium EPSS 16.8% KEV · Not listed
Vendors
Microsoft
Products
Sharepoint Foundation Sharepoint Services
CVE-2011-1890

Cross-site scripting (XSS) vulnerability in EditForm.aspx in Microsoft Office SharePoint Server 2010 and SharePoint Foundation 2010 allows remote attackers to inject arbitrary web script or HTML via a post, aka "Editform Script Injection Vulnerability."

CVSS 2.0 · 4.3 Medium EPSS 19.8% KEV · Not listed
Vendors
Microsoft
Products
Sharepoint Foundation Sharepoint Server