) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.
Search Results (Refine Search)
- Results Type: Overview
- Keyword (text search): cpe:2.3:a:microsoft:sharepoint_server:-:language_pack:*:*:subscription:*:*:*
- CPE Name Search: true
| Vuln ID | Summary | CVSS Severity |
|---|---|---|
| CVE-2022-37961 |
Microsoft SharePoint Server Remote Code Execution Vulnerability Published: September 13, 2022; 3:15:12 PM -0400 |
V4.0:(not available) V3.1: 8.8 HIGH V2.0:(not available) |
| CVE-2022-35823 |
Microsoft SharePoint Remote Code Execution Vulnerability Published: September 13, 2022; 3:15:11 PM -0400 |
V4.0:(not available) V3.1: 8.8 HIGH V2.0:(not available) |
| CVE-2022-30172 |
Microsoft Office Information Disclosure Vulnerability Published: June 15, 2022; 6:15:15 PM -0400 |
V4.0:(not available) V3.1: 5.5 MEDIUM V2.0: 4.3 MEDIUM |
| CVE-2022-30171 |
Microsoft Office Information Disclosure Vulnerability Published: June 15, 2022; 6:15:14 PM -0400 |
V4.0:(not available) V3.1: 5.5 MEDIUM V2.0: 4.3 MEDIUM |
| CVE-2022-30159 |
Microsoft Office Information Disclosure Vulnerability. This CVE ID is unique from CVE-2022-30171, CVE-2022-30172. Published: June 15, 2022; 6:15:14 PM -0400 |
V4.0:(not available) V3.1: 5.5 MEDIUM V2.0: 4.3 MEDIUM |
| CVE-2022-30158 |
Microsoft SharePoint Server Remote Code Execution Vulnerability Published: June 15, 2022; 6:15:14 PM -0400 |
V4.0:(not available) V3.1: 8.8 HIGH V2.0: 6.0 MEDIUM |
| CVE-2022-30157 |
Microsoft SharePoint Server Remote Code Execution Vulnerability Published: June 15, 2022; 6:15:14 PM -0400 |
V4.0:(not available) V3.1: 8.8 HIGH V2.0: 6.5 MEDIUM |
| CVE-2022-24472 |
Microsoft SharePoint Server Spoofing Vulnerability Published: April 15, 2022; 3:15:09 PM -0400 |
V4.0:(not available) V3.1: 8.0 HIGH V2.0: 3.5 LOW |
| CVE-2022-22005 |
Microsoft SharePoint Server Remote Code Execution Vulnerability Published: February 09, 2022; 12:15:09 PM -0500 |
V4.0:(not available) V3.1: 8.8 HIGH V2.0: 6.5 MEDIUM |
| CVE-2022-21987 |
Microsoft SharePoint Server Spoofing Vulnerability Published: February 09, 2022; 12:15:08 PM -0500 |
V4.0:(not available) V3.1: 8.0 HIGH V2.0: 6.0 MEDIUM |
| CVE-2022-21968 |
Microsoft SharePoint Server Security Feature Bypass Vulnerability Published: February 09, 2022; 12:15:08 PM -0500 |
V4.0:(not available) V3.1: 4.3 MEDIUM V2.0: 4.0 MEDIUM |
| CVE-2022-21840 |
Microsoft Office Remote Code Execution Vulnerability Published: January 11, 2022; 4:15:09 PM -0500 |
V4.0:(not available) V3.1: 8.8 HIGH V2.0: 6.8 MEDIUM |
| CVE-2022-21837 |
Microsoft SharePoint Server Remote Code Execution Vulnerability Published: January 11, 2022; 4:15:09 PM -0500 |
V4.0:(not available) V3.1: 8.8 HIGH V2.0: 9.0 HIGH |
| CVE-2021-43242 |
Microsoft SharePoint Server Spoofing Vulnerability Published: December 15, 2021; 10:15:10 AM -0500 |
V4.0:(not available) V3.1: 5.7 MEDIUM V2.0: 3.5 LOW |
| CVE-2021-42320 |
Microsoft SharePoint Server Spoofing Vulnerability Published: December 15, 2021; 10:15:09 AM -0500 |
V4.0:(not available) V3.1: 5.7 MEDIUM V2.0: 3.5 LOW |
| CVE-2021-42309 |
Microsoft SharePoint Server Remote Code Execution Vulnerability Published: December 15, 2021; 10:15:08 AM -0500 |
V4.0:(not available) V3.1: 8.8 HIGH V2.0: 6.5 MEDIUM |
| CVE-2021-42294 |
Microsoft SharePoint Server Remote Code Execution Vulnerability Published: December 15, 2021; 10:15:08 AM -0500 |
V4.0:(not available) V3.1: 7.2 HIGH V2.0: 6.5 MEDIUM |
| CVE-2009-5092 |
Cross-site scripting (XSS) vulnerability in the management interface in Microsoft FAST ESP 5.1.5 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Published: September 12, 2011; 8:40:39 AM -0400 |
V4.0:(not available) V3.x:(not available) V2.0: 4.3 MEDIUM |
| CVE-2008-5026 |
Microsoft SharePoint uses URLs with the same hostname and port number for a web site's primary files and individual users' uploaded files (aka attachments), which allows remote authenticated users to leverage same-origin relationships and conduct cross-site scripting (XSS) attacks by uploading HTML documents. Published: November 10, 2008; 10:23:29 AM -0500 |
V4.0:(not available) V3.x:(not available) V2.0: 3.5 LOW |