Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 294

Export CSV
CVE-2020-1454

This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server.An authenticated attacker could exploit this vulnerability by sending a specially crafted request to an affected SharePoint server, aka 'Microsoft SharePoint Reflective XSS Vulnerability'.

CVSS 3.1 · 5.4 Medium EPSS 1.6% KEV · Not listed
Vendors
Microsoft
Products
Sharepoint Enterprise Server Sharepoint Server
CVE-2020-1451

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1450, CVE-2020-1456.

CVSS 3.1 · 5.4 Medium EPSS 1.6% KEV · Not listed
Vendors
Microsoft
Products
Sharepoint Enterprise Server Sharepoint Server
CVE-2020-1450

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1451, CVE-2020-1456.

CVSS 3.1 · 5.4 Medium EPSS 1.6% KEV · Not listed
Vendors
Microsoft
Products
Sharepoint Enterprise Server Sharepoint Server
CVE-2020-1320

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1177, CVE-2020-1183, CVE-2020-1297, CVE-2020-1298, CVE-2020-1318.

CVSS 3.1 · 5.4 Medium EPSS 1.5% KEV · Not listed
Vendors
Microsoft
Products
Sharepoint Enterprise Server Sharepoint Foundation Sharepoint Server
CVE-2020-1318

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1177, CVE-2020-1183, CVE-2020-1297, CVE-2020-1298, CVE-2020-1320.

CVSS 3.1 · 5.4 Medium EPSS 1.5% KEV · Not listed
Vendors
Microsoft
Products
Sharepoint Enterprise Server Sharepoint Foundation Sharepoint Server
CVE-2020-1298

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1177, CVE-2020-1183, CVE-2020-1297, CVE-2020-1318, CVE-2020-1320.

CVSS 3.1 · 5.4 Medium EPSS 1.5% KEV · Not listed
Vendors
Microsoft
Products
Sharepoint Enterprise Server Sharepoint Foundation Sharepoint Server
CVE-2020-1297

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1177, CVE-2020-1183, CVE-2020-1298, CVE-2020-1318, CVE-2020-1320.

CVSS 3.1 · 5.4 Medium EPSS 1.5% KEV · Not listed
Vendors
Microsoft
Products
Sharepoint Enterprise Server Sharepoint Foundation Sharepoint Server
CVE-2020-1183

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1177, CVE-2020-1297, CVE-2020-1298, CVE-2020-1318, CVE-2020-1320.

CVSS 3.1 · 5.4 Medium EPSS 1.5% KEV · Not listed
Vendors
Microsoft
Products
Sharepoint Enterprise Server Sharepoint Foundation Sharepoint Server
CVE-2020-1177

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1183, CVE-2020-1297, CVE-2020-1298, CVE-2020-1318, CVE-2020-1320.

CVSS 3.1 · 5.4 Medium EPSS 1.5% KEV · Not listed
Vendors
Microsoft
Products
Sharepoint Enterprise Server Sharepoint Foundation Sharepoint Server
CVE-2020-0978

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0923, CVE-2020-0924, CVE-2020-0925, CVE-2020-0926, CVE-2020-0927, CVE-2020-0930, CVE-2020-0933, CVE-2020-0954, CVE-2020-0973.

CVSS 3.1 · 5.4 Medium EPSS 1.5% KEV · Not listed
Vendors
Microsoft
Products
Sharepoint Enterprise Server Sharepoint Foundation Sharepoint Server
CVE-2020-0973

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0923, CVE-2020-0924, CVE-2020-0925, CVE-2020-0926, CVE-2020-0927, CVE-2020-0930, CVE-2020-0933, CVE-2020-0954, CVE-2020-0978.

CVSS 3.1 · 5.4 Medium EPSS 1.5% KEV · Not listed
Vendors
Microsoft
Products
Sharepoint Enterprise Server Sharepoint Server
CVE-2020-0954

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0923, CVE-2020-0924, CVE-2020-0925, CVE-2020-0926, CVE-2020-0927, CVE-2020-0930, CVE-2020-0933, CVE-2020-0973, CVE-2020-0978.

CVSS 3.1 · 5.4 Medium EPSS 1.5% KEV · Not listed
Vendors
Microsoft
Products
Project Server Sharepoint Enterprise Server Sharepoint Server