CVE Daily – Microsoft SharePoint https://cvedaily.com/pages/tags/sharepoint.html CVE Daily – Microsoft SharePoint en Wed, 03 Jun 2026 21:26:35 +0000 [High] CVE-2026-47294 – Deserialization of untrusted data in Microsoft Office SharePoint allows an autho... https://nvd.nist.gov/vuln/detail/CVE-2026-47294 https://nvd.nist.gov/vuln/detail/CVE-2026-47294 Mon, 01 Jun 2026 19:16:53 +0000 High CVE-2026-47294

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVSS: 8.0 · CWE: CWE-78

View on NVD

]]> [High] CVE-2026-45659 – Deserialization of untrusted data in Microsoft Office SharePoint allows an autho... https://nvd.nist.gov/vuln/detail/CVE-2026-45659 https://nvd.nist.gov/vuln/detail/CVE-2026-45659 Fri, 22 May 2026 23:16:56 +0000 High CVE-2026-45659

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVSS: 8.8 · CWE: CWE-502

View on NVD

]]> [High] CVE-2026-40368 – Deserialization of untrusted data in Microsoft Office SharePoint allows an autho... https://nvd.nist.gov/vuln/detail/CVE-2026-40368 https://nvd.nist.gov/vuln/detail/CVE-2026-40368 Tue, 12 May 2026 18:17:15 +0000 High CVE-2026-40368

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVSS: 8.0 · CWE: CWE-502

View on NVD

]]> [High] CVE-2026-40365 – Deserialization of untrusted data in Microsoft Office SharePoint allows an autho... https://nvd.nist.gov/vuln/detail/CVE-2026-40365 https://nvd.nist.gov/vuln/detail/CVE-2026-40365 Tue, 12 May 2026 18:17:15 +0000 High CVE-2026-40365

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVSS: 8.8 · CWE: CWE-1220

View on NVD

]]> [High] CVE-2026-40357 – Deserialization of untrusted data in Microsoft Office SharePoint allows an autho... https://nvd.nist.gov/vuln/detail/CVE-2026-40357 https://nvd.nist.gov/vuln/detail/CVE-2026-40357 Tue, 12 May 2026 18:17:14 +0000 High CVE-2026-40357

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVSS: 8.8 · CWE: CWE-502

View on NVD

]]> [High] CVE-2026-35439 – Deserialization of untrusted data in Microsoft Office SharePoint allows an autho... https://nvd.nist.gov/vuln/detail/CVE-2026-35439 https://nvd.nist.gov/vuln/detail/CVE-2026-35439 Tue, 12 May 2026 18:17:14 +0000 High CVE-2026-35439

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVSS: 8.8 · CWE: CWE-502

View on NVD

]]> [High] CVE-2026-33112 – Deserialization of untrusted data in Microsoft Office SharePoint allows an autho... https://nvd.nist.gov/vuln/detail/CVE-2026-33112 https://nvd.nist.gov/vuln/detail/CVE-2026-33112 Tue, 12 May 2026 18:17:03 +0000 High CVE-2026-33112

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVSS: 8.8 · CWE: CWE-502

View on NVD

]]> [High] CVE-2026-33110 – Deserialization of untrusted data in Microsoft Office SharePoint allows an autho... https://nvd.nist.gov/vuln/detail/CVE-2026-33110 https://nvd.nist.gov/vuln/detail/CVE-2026-33110 Tue, 12 May 2026 18:17:03 +0000 High CVE-2026-33110

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVSS: 8.8 · CWE: CWE-502

View on NVD

]]> [Medium] CVE-2026-32201 – Improper input validation in Microsoft Office SharePoint allows an unauthorized ... https://nvd.nist.gov/vuln/detail/CVE-2026-32201 https://nvd.nist.gov/vuln/detail/CVE-2026-32201 Tue, 14 Apr 2026 18:17:27 +0000 Medium CVE-2026-32201

Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

CVSS: 6.5 · CWE: CWE-20

View on NVD

]]> [Medium] CVE-2026-20945 – Improper neutralization of input during web page generation ('cross-site scripti... https://nvd.nist.gov/vuln/detail/CVE-2026-20945 https://nvd.nist.gov/vuln/detail/CVE-2026-20945 Tue, 14 Apr 2026 18:16:43 +0000 Medium CVE-2026-20945

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

CVSS: 4.6 · CWE: CWE-79

View on NVD

]]> [High] CVE-2026-26114 – Deserialization of untrusted data in Microsoft Office SharePoint allows an autho... https://nvd.nist.gov/vuln/detail/CVE-2026-26114 https://nvd.nist.gov/vuln/detail/CVE-2026-26114 Tue, 10 Mar 2026 18:18:40 +0000 High CVE-2026-26114

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVSS: 8.8 · CWE: CWE-502

View on NVD

]]> [High] CVE-2026-26106 – Improper input validation in Microsoft Office SharePoint allows an authorized at... https://nvd.nist.gov/vuln/detail/CVE-2026-26106 https://nvd.nist.gov/vuln/detail/CVE-2026-26106 Tue, 10 Mar 2026 18:18:38 +0000 High CVE-2026-26106

Improper input validation in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVSS: 8.8 · CWE: CWE-20

View on NVD

]]> [High] CVE-2026-26105 – Improper neutralization of input during web page generation ('cross-site scripti... https://nvd.nist.gov/vuln/detail/CVE-2026-26105 https://nvd.nist.gov/vuln/detail/CVE-2026-26105 Tue, 10 Mar 2026 18:18:38 +0000 High CVE-2026-26105

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

CVSS: 8.1 · CWE: CWE-79

View on NVD

]]> [Critical] CVE-2026-20963 – Deserialization of untrusted data in Microsoft Office SharePoint allows an unaut... https://nvd.nist.gov/vuln/detail/CVE-2026-20963 https://nvd.nist.gov/vuln/detail/CVE-2026-20963 Tue, 13 Jan 2026 18:16:24 +0000 Critical CVE-2026-20963

Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.

CVSS: 9.8 · CWE: CWE-502

View on NVD

]]> [Medium] CVE-2026-20959 – Improper neutralization of input during web page generation ('cross-site scripti... https://nvd.nist.gov/vuln/detail/CVE-2026-20959 https://nvd.nist.gov/vuln/detail/CVE-2026-20959 Tue, 13 Jan 2026 18:16:23 +0000 Medium CVE-2026-20959

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

CVSS: 4.6 · CWE: CWE-79

View on NVD

]]> [Medium] CVE-2026-20958 – Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an auth... https://nvd.nist.gov/vuln/detail/CVE-2026-20958 https://nvd.nist.gov/vuln/detail/CVE-2026-20958 Tue, 13 Jan 2026 18:16:23 +0000 Medium CVE-2026-20958

Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

CVSS: 5.4 · CWE: CWE-918

View on NVD

]]> [High] CVE-2026-20951 – Improper input validation in Microsoft Office SharePoint allows an unauthorized ... https://nvd.nist.gov/vuln/detail/CVE-2026-20951 https://nvd.nist.gov/vuln/detail/CVE-2026-20951 Tue, 13 Jan 2026 18:16:22 +0000 High CVE-2026-20951

Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally.

CVSS: 7.8 · CWE: CWE-20

View on NVD

]]> [High] CVE-2026-20947 – Improper neutralization of special elements used in an sql command ('sql injecti... https://nvd.nist.gov/vuln/detail/CVE-2026-20947 https://nvd.nist.gov/vuln/detail/CVE-2026-20947 Tue, 13 Jan 2026 18:16:22 +0000 High CVE-2026-20947

Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVSS: 8.8 · CWE: CWE-89

View on NVD

]]> [High] CVE-2025-64672 – Improper neutralization of input during web page generation ('cross-site scripti... https://nvd.nist.gov/vuln/detail/CVE-2025-64672 https://nvd.nist.gov/vuln/detail/CVE-2025-64672 Tue, 09 Dec 2025 18:16:06 +0000 High CVE-2025-64672

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

CVSS: 8.8 · CWE: CWE-79

View on NVD

]]> [Critical] CVE-2025-59245 – Microsoft SharePoint Online Elevation of Privilege Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2025-59245 https://nvd.nist.gov/vuln/detail/CVE-2025-59245 Thu, 20 Nov 2025 23:15:52 +0000 Critical CVE-2025-59245

Microsoft SharePoint Online Elevation of Privilege Vulnerability

CVSS: 9.8 · CWE: CWE-502

View on NVD

]]> [High] CVE-2025-10703 – Improper Control of Generation of Code ('Code Injection') vulnerability in Progr... https://nvd.nist.gov/vuln/detail/CVE-2025-10703 https://nvd.nist.gov/vuln/detail/CVE-2025-10703 Wed, 19 Nov 2025 16:15:46 +0000 High CVE-2025-10703

Improper Control of Generation of Code ('Code Injection') vulnerability in Progress DataDirect Connect for JDBC drivers, Progress DataDirect Open Access JDBC driver and Hybrid Data Pipeline allows Remote Code Inclusion. The SpyAttribute connection option implemented by the DataDirect Connect for JDBC drivers, DataDirect Hybrid Data Pipeline JDBC driver and the DataDirect OpenAccess JDBC driver l…

CVSS: 8.6 · CWE: CWE-94

View on NVD

]]> [High] CVE-2025-10702 – Improper Control of Generation of Code ('Code Injection') vulnerability in Progr... https://nvd.nist.gov/vuln/detail/CVE-2025-10702 https://nvd.nist.gov/vuln/detail/CVE-2025-10702 Wed, 19 Nov 2025 16:15:46 +0000 High CVE-2025-10702

Improper Control of Generation of Code ('Code Injection') vulnerability in Progress DataDirect Connect for JDBC drivers, Progress DataDirect Open Access JDBC driver and Hybrid Data Pipeline allows Remote Code Inclusion. The SpyAttribute connection option implemented by the DataDirect Connect for JDBC drivers, DataDirect Hybrid Data Pipeline JDBC driver and the DataDirect OpenAccess JDBC driver…

CVSS: 8.6 · CWE: CWE-94

View on NVD

]]> [High] CVE-2025-62204 – Deserialization of untrusted data in Microsoft Office SharePoint allows an autho... https://nvd.nist.gov/vuln/detail/CVE-2025-62204 https://nvd.nist.gov/vuln/detail/CVE-2025-62204 Tue, 11 Nov 2025 18:15:45 +0000 High CVE-2025-62204

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVSS: 8.0 · CWE: CWE-502

View on NVD

]]> [High] CVE-2025-59237 – Deserialization of untrusted data in Microsoft Office SharePoint allows an autho... https://nvd.nist.gov/vuln/detail/CVE-2025-59237 https://nvd.nist.gov/vuln/detail/CVE-2025-59237 Tue, 14 Oct 2025 17:16:05 +0000 High CVE-2025-59237

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVSS: 8.8 · CWE: CWE-502

View on NVD

]]> [High] CVE-2025-59228 – Improper input validation in Microsoft Office SharePoint allows an authorized at... https://nvd.nist.gov/vuln/detail/CVE-2025-59228 https://nvd.nist.gov/vuln/detail/CVE-2025-59228 Tue, 14 Oct 2025 17:16:03 +0000 High CVE-2025-59228

Improper input validation in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVSS: 8.8 · CWE: CWE-20

View on NVD

]]> [High] CVE-2025-54897 – Deserialization of untrusted data in Microsoft Office SharePoint allows an autho... https://nvd.nist.gov/vuln/detail/CVE-2025-54897 https://nvd.nist.gov/vuln/detail/CVE-2025-54897 Tue, 09 Sep 2025 17:16:00 +0000 High CVE-2025-54897

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVSS: 8.8 · CWE: CWE-502

View on NVD

]]> [High] CVE-2025-53760 – Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an auth... https://nvd.nist.gov/vuln/detail/CVE-2025-53760 https://nvd.nist.gov/vuln/detail/CVE-2025-53760 Tue, 12 Aug 2025 18:15:44 +0000 High CVE-2025-53760

Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

CVSS: 7.1 · CWE: CWE-918

View on NVD

]]> [High] CVE-2025-49712 – Deserialization of untrusted data in Microsoft Office SharePoint allows an autho... https://nvd.nist.gov/vuln/detail/CVE-2025-49712 https://nvd.nist.gov/vuln/detail/CVE-2025-49712 Tue, 12 Aug 2025 18:15:30 +0000 High CVE-2025-49712

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVSS: 8.8 · CWE: CWE-502

View on NVD

]]> [Medium] CVE-2025-53771 – Improper authentication in Microsoft Office SharePoint allows an unauthorized at... https://nvd.nist.gov/vuln/detail/CVE-2025-53771 https://nvd.nist.gov/vuln/detail/CVE-2025-53771 Sun, 20 Jul 2025 23:15:31 +0000 Medium CVE-2025-53771

Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

CVSS: 6.5 · CWE: CWE-287

View on NVD

]]> [Critical] CVE-2025-53770 – Deserialization of untrusted data in on-premises Microsoft SharePoint Server all... https://nvd.nist.gov/vuln/detail/CVE-2025-53770 https://nvd.nist.gov/vuln/detail/CVE-2025-53770 Sun, 20 Jul 2025 01:15:30 +0000 Critical CVE-2025-53770

Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an unauthorized attacker to execute code over a network. Microsoft is aware that an exploit for CVE-2025-53770 exists in the wild. Microsoft is preparing and fully testing a comprehensive update to address this vulnerability. In the meantime, please make sure that the mitigation provided in this CVE documentation…

CVSS: 9.8 · CWE: CWE-502

View on NVD

]]> [Medium] CVE-2025-49706 – Improper authentication in Microsoft Office SharePoint allows an unauthorized at... https://nvd.nist.gov/vuln/detail/CVE-2025-49706 https://nvd.nist.gov/vuln/detail/CVE-2025-49706 Tue, 08 Jul 2025 17:15:58 +0000 Medium CVE-2025-49706

Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

CVSS: 6.5 · CWE: CWE-287

View on NVD

]]> [High] CVE-2025-49704 – Improper control of generation of code ('code injection') in Microsoft Office Sh... https://nvd.nist.gov/vuln/detail/CVE-2025-49704 https://nvd.nist.gov/vuln/detail/CVE-2025-49704 Tue, 08 Jul 2025 17:15:57 +0000 High CVE-2025-49704

Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVSS: 8.8 · CWE: CWE-94

View on NVD

]]> [High] CVE-2025-49701 – Improper authorization in Microsoft Office SharePoint allows an authorized attac... https://nvd.nist.gov/vuln/detail/CVE-2025-49701 https://nvd.nist.gov/vuln/detail/CVE-2025-49701 Tue, 08 Jul 2025 17:15:57 +0000 High CVE-2025-49701

Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVSS: 8.8 · CWE: CWE-285

View on NVD

]]> [High] CVE-2025-47172 – Improper neutralization of special elements used in an sql command ('sql injecti... https://nvd.nist.gov/vuln/detail/CVE-2025-47172 https://nvd.nist.gov/vuln/detail/CVE-2025-47172 Tue, 10 Jun 2025 17:23:51 +0000 High CVE-2025-47172

Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVSS: 8.8 · CWE: CWE-89

View on NVD

]]> [High] CVE-2025-47166 – Deserialization of untrusted data in Microsoft Office SharePoint allows an autho... https://nvd.nist.gov/vuln/detail/CVE-2025-47166 https://nvd.nist.gov/vuln/detail/CVE-2025-47166 Tue, 10 Jun 2025 17:23:38 +0000 High CVE-2025-47166

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVSS: 8.8 · CWE: CWE-502

View on NVD

]]> [High] CVE-2025-47163 – Deserialization of untrusted data in Microsoft Office SharePoint allows an autho... https://nvd.nist.gov/vuln/detail/CVE-2025-47163 https://nvd.nist.gov/vuln/detail/CVE-2025-47163 Tue, 10 Jun 2025 17:23:28 +0000 High CVE-2025-47163

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVSS: 8.8 · CWE: CWE-502

View on NVD

]]> [High] CVE-2025-30384 – Deserialization of untrusted data in Microsoft Office SharePoint allows an unaut... https://nvd.nist.gov/vuln/detail/CVE-2025-30384 https://nvd.nist.gov/vuln/detail/CVE-2025-30384 Tue, 13 May 2025 17:16:01 +0000 High CVE-2025-30384

Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally.

CVSS: 7.4 · CWE: CWE-502

View on NVD

]]> [High] CVE-2025-30382 – Deserialization of untrusted data in Microsoft Office SharePoint allows an unaut... https://nvd.nist.gov/vuln/detail/CVE-2025-30382 https://nvd.nist.gov/vuln/detail/CVE-2025-30382 Tue, 13 May 2025 17:16:00 +0000 High CVE-2025-30382

Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally.

CVSS: 7.8 · CWE: CWE-502

View on NVD

]]> [High] CVE-2025-30378 – Deserialization of untrusted data in Microsoft Office SharePoint allows an unaut... https://nvd.nist.gov/vuln/detail/CVE-2025-30378 https://nvd.nist.gov/vuln/detail/CVE-2025-30378 Tue, 13 May 2025 17:16:00 +0000 High CVE-2025-30378

Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally.

CVSS: 7.0 · CWE: CWE-502

View on NVD

]]> [High] CVE-2025-29976 – Improper privilege management in Microsoft Office SharePoint allows an authorize... https://nvd.nist.gov/vuln/detail/CVE-2025-29976 https://nvd.nist.gov/vuln/detail/CVE-2025-29976 Tue, 13 May 2025 17:15:58 +0000 High CVE-2025-29976

Improper privilege management in Microsoft Office SharePoint allows an authorized attacker to elevate privileges locally.

CVSS: 7.8 · CWE: CWE-269

View on NVD

]]> [High] CVE-2025-29794 – Improper authorization in Microsoft Office SharePoint allows an authorized attac... https://nvd.nist.gov/vuln/detail/CVE-2025-29794 https://nvd.nist.gov/vuln/detail/CVE-2025-29794 Tue, 08 Apr 2025 18:16:05 +0000 High CVE-2025-29794

Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVSS: 8.8 · CWE: CWE-285

View on NVD

]]> [High] CVE-2025-29793 – Deserialization of untrusted data in Microsoft Office SharePoint allows an autho... https://nvd.nist.gov/vuln/detail/CVE-2025-29793 https://nvd.nist.gov/vuln/detail/CVE-2025-29793 Tue, 08 Apr 2025 18:16:05 +0000 High CVE-2025-29793

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVSS: 7.2 · CWE: CWE-502

View on NVD

]]> [High] CVE-2025-1080 – LibreOffice supports Office URI Schemes to enable browser integration of LibreOf... https://nvd.nist.gov/vuln/detail/CVE-2025-1080 https://nvd.nist.gov/vuln/detail/CVE-2025-1080 Tue, 04 Mar 2025 20:15:36 +0000 High CVE-2025-1080

LibreOffice supports Office URI Schemes to enable browser integration of LibreOffice with MS SharePoint server. An additional scheme 'vnd.libreoffice.command' specific to LibreOffice was added. In the affected versions of LibreOffice a link in a browser using that scheme could be constructed with an embedded inner URL that when passed to LibreOffice could call internal macros with arbitrary argum…

CVSS: 7.8 · CWE: CWE-20

View on NVD

]]> [High] CVE-2025-21400 – Microsoft SharePoint Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2025-21400 https://nvd.nist.gov/vuln/detail/CVE-2025-21400 Tue, 11 Feb 2025 18:15:38 +0000 High CVE-2025-21400

Microsoft SharePoint Server Remote Code Execution Vulnerability

CVSS: 8.0 · CWE: CWE-285

View on NVD

]]> [Medium] CVE-2025-21393 – Microsoft SharePoint Server Spoofing Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2025-21393 https://nvd.nist.gov/vuln/detail/CVE-2025-21393 Tue, 14 Jan 2025 18:16:03 +0000 Medium CVE-2025-21393

Microsoft SharePoint Server Spoofing Vulnerability

CVSS: 6.3 · CWE: CWE-79

View on NVD

]]> [High] CVE-2025-21348 – Microsoft SharePoint Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2025-21348 https://nvd.nist.gov/vuln/detail/CVE-2025-21348 Tue, 14 Jan 2025 18:16:00 +0000 High CVE-2025-21348

Microsoft SharePoint Server Remote Code Execution Vulnerability

CVSS: 7.2 · CWE: CWE-285

View on NVD

]]> [High] CVE-2025-21344 – Microsoft SharePoint Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2025-21344 https://nvd.nist.gov/vuln/detail/CVE-2025-21344 Tue, 14 Jan 2025 18:16:00 +0000 High CVE-2025-21344

Microsoft SharePoint Server Remote Code Execution Vulnerability

CVSS: 7.8 · CWE: CWE-20

View on NVD

]]> [High] CVE-2024-49070 – Microsoft SharePoint Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-49070 https://nvd.nist.gov/vuln/detail/CVE-2024-49070 Thu, 12 Dec 2024 02:04:31 +0000 High CVE-2024-49070

Microsoft SharePoint Remote Code Execution Vulnerability

CVSS: 7.4 · CWE: CWE-502

View on NVD

]]> [High] CVE-2024-49068 – Microsoft SharePoint Elevation of Privilege Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-49068 https://nvd.nist.gov/vuln/detail/CVE-2024-49068 Thu, 12 Dec 2024 02:04:30 +0000 High CVE-2024-49068

Microsoft SharePoint Elevation of Privilege Vulnerability

CVSS: 8.2 · CWE: CWE-284

View on NVD

]]> [Medium] CVE-2024-49064 – Microsoft SharePoint Information Disclosure Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-49064 https://nvd.nist.gov/vuln/detail/CVE-2024-49064 Thu, 12 Dec 2024 02:04:30 +0000 Medium CVE-2024-49064

Microsoft SharePoint Information Disclosure Vulnerability

CVSS: 6.5 · CWE: CWE-611

View on NVD

]]> [Medium] CVE-2024-49062 – Microsoft SharePoint Information Disclosure Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-49062 https://nvd.nist.gov/vuln/detail/CVE-2024-49062 Thu, 12 Dec 2024 02:04:30 +0000 Medium CVE-2024-49062

Microsoft SharePoint Information Disclosure Vulnerability

CVSS: 6.5 · CWE: CWE-23

View on NVD

]]> [High] CVE-2024-10839 – Zohocorp ManageEngine SharePoint Manager Plus versions 4503 and prior are vulner... https://nvd.nist.gov/vuln/detail/CVE-2024-10839 https://nvd.nist.gov/vuln/detail/CVE-2024-10839 Fri, 08 Nov 2024 11:15:03 +0000 High CVE-2024-10839

Zohocorp ManageEngine SharePoint Manager Plus versions 4503 and prior are vulnerable to authenticated XML External Entity (XXE) in the Management option.

CVSS: 8.5 · CWE: CWE-611

View on NVD

]]> [High] CVE-2024-43503 – Microsoft SharePoint Elevation of Privilege Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-43503 https://nvd.nist.gov/vuln/detail/CVE-2024-43503 Tue, 08 Oct 2024 18:15:12 +0000 High CVE-2024-43503

Microsoft SharePoint Elevation of Privilege Vulnerability

CVSS: 7.8 · CWE: CWE-284

View on NVD

]]> [High] CVE-2024-45851 – An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24... https://nvd.nist.gov/vuln/detail/CVE-2024-45851 https://nvd.nist.gov/vuln/detail/CVE-2024-45851 Thu, 12 Sep 2024 13:15:14 +0000 High CVE-2024-45851

An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the Microsoft SharePoint integration is installed on the server. For databases created with the SharePoint engine, an ‘INSERT’ query can be used for list item creation. If such a query is specially crafted to contain Python code and is run against the database, the code will be pass…

CVSS: 8.8 · CWE: CWE-95

View on NVD

]]> [High] CVE-2024-45850 – An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24... https://nvd.nist.gov/vuln/detail/CVE-2024-45850 https://nvd.nist.gov/vuln/detail/CVE-2024-45850 Thu, 12 Sep 2024 13:15:13 +0000 High CVE-2024-45850

An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the Microsoft SharePoint integration is installed on the server. For databases created with the SharePoint engine, an ‘INSERT’ query can be used for site column creation. If such a query is specially crafted to contain Python code and is run against the database, the code will be pa…

CVSS: 8.8 · CWE: CWE-95

View on NVD

]]> [High] CVE-2024-45849 – An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24... https://nvd.nist.gov/vuln/detail/CVE-2024-45849 https://nvd.nist.gov/vuln/detail/CVE-2024-45849 Thu, 12 Sep 2024 13:15:13 +0000 High CVE-2024-45849

An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the Microsoft SharePoint integration is installed on the server. For databases created with the SharePoint engine, an ‘INSERT’ query can be used for list creation. If such a query is specially crafted to contain Python code and is run against the database, the code will be passed to…

CVSS: 8.8 · CWE: CWE-95

View on NVD

]]> [Medium] CVE-2024-43466 – Microsoft SharePoint Server Denial of Service Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-43466 https://nvd.nist.gov/vuln/detail/CVE-2024-43466 Tue, 10 Sep 2024 17:15:34 +0000 Medium CVE-2024-43466

Microsoft SharePoint Server Denial of Service Vulnerability

CVSS: 6.5 · CWE: CWE-502

View on NVD

]]> [High] CVE-2024-43464 – Microsoft SharePoint Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-43464 https://nvd.nist.gov/vuln/detail/CVE-2024-43464 Tue, 10 Sep 2024 17:15:33 +0000 High CVE-2024-43464

Microsoft SharePoint Server Remote Code Execution Vulnerability

CVSS: 7.2 · CWE: CWE-502

View on NVD

]]> [High] CVE-2024-38228 – Microsoft SharePoint Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-38228 https://nvd.nist.gov/vuln/detail/CVE-2024-38228 Tue, 10 Sep 2024 17:15:25 +0000 High CVE-2024-38228

Microsoft SharePoint Server Remote Code Execution Vulnerability

CVSS: 7.2 · CWE: CWE-77

View on NVD

]]> [High] CVE-2024-38227 – Microsoft SharePoint Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-38227 https://nvd.nist.gov/vuln/detail/CVE-2024-38227 Tue, 10 Sep 2024 17:15:25 +0000 High CVE-2024-38227

Microsoft SharePoint Server Remote Code Execution Vulnerability

CVSS: 7.2 · CWE: CWE-77

View on NVD

]]> [High] CVE-2024-38018 – Microsoft SharePoint Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-38018 https://nvd.nist.gov/vuln/detail/CVE-2024-38018 Tue, 10 Sep 2024 17:15:20 +0000 High CVE-2024-38018

Microsoft SharePoint Server Remote Code Execution Vulnerability

CVSS: 8.8 · CWE: CWE-502

View on NVD

]]> [High] CVE-2024-38094 – Microsoft SharePoint Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-38094 https://nvd.nist.gov/vuln/detail/CVE-2024-38094 Tue, 09 Jul 2024 17:15:46 +0000 High CVE-2024-38094

Microsoft SharePoint Remote Code Execution Vulnerability

CVSS: 7.2 · CWE: CWE-502

View on NVD

]]> [High] CVE-2024-38024 – Microsoft SharePoint Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-38024 https://nvd.nist.gov/vuln/detail/CVE-2024-38024 Tue, 09 Jul 2024 17:15:28 +0000 High CVE-2024-38024

Microsoft SharePoint Server Remote Code Execution Vulnerability

CVSS: 7.2 · CWE: CWE-502

View on NVD

]]> [High] CVE-2024-38023 – Microsoft SharePoint Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-38023 https://nvd.nist.gov/vuln/detail/CVE-2024-38023 Tue, 09 Jul 2024 17:15:28 +0000 High CVE-2024-38023

Microsoft SharePoint Server Remote Code Execution Vulnerability

CVSS: 7.2 · CWE: CWE-502

View on NVD

]]> [High] CVE-2024-32987 – Microsoft SharePoint Server Information Disclosure Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-32987 https://nvd.nist.gov/vuln/detail/CVE-2024-32987 Tue, 09 Jul 2024 17:15:17 +0000 High CVE-2024-32987

Microsoft SharePoint Server Information Disclosure Vulnerability

CVSS: 7.5 · CWE: CWE-918

View on NVD

]]> [Medium] CVE-2024-34400 – An issue was discovered in VirtoSoftware Virto Kanban Board Web Part before 5.3... https://nvd.nist.gov/vuln/detail/CVE-2024-34400 https://nvd.nist.gov/vuln/detail/CVE-2024-34400 Tue, 25 Jun 2024 21:15:59 +0000 Medium CVE-2024-34400

An issue was discovered in VirtoSoftware Virto Kanban Board Web Part before 5.3.5.1 for SharePoint 2019. There is /_layouts/15/Virto.KanbanTaskManager/api/KanbanData.ashx LinkTitle2 XSS.

CVSS: 6.1 · CWE: N/A

View on NVD

]]> [Medium] CVE-2024-33881 – An issue was discovered in VirtoSoftware Virto Bulk File Download 5.5.44 for Sha... https://nvd.nist.gov/vuln/detail/CVE-2024-33881 https://nvd.nist.gov/vuln/detail/CVE-2024-33881 Mon, 24 Jun 2024 17:15:10 +0000 Medium CVE-2024-33881

An issue was discovered in VirtoSoftware Virto Bulk File Download 5.5.44 for SharePoint 2019. The Virto.SharePoint.FileDownloader/Api/Download.ashx isCompleted method allows an NTLMv2 hash leak via a UNC share pathname in the path parameter.

CVSS: 5.3 · CWE: CWE-22

View on NVD

]]> [Medium] CVE-2024-33880 – An issue was discovered in VirtoSoftware Virto Bulk File Download 5.5.44 for Sha... https://nvd.nist.gov/vuln/detail/CVE-2024-33880 https://nvd.nist.gov/vuln/detail/CVE-2024-33880 Mon, 24 Jun 2024 17:15:10 +0000 Medium CVE-2024-33880

An issue was discovered in VirtoSoftware Virto Bulk File Download 5.5.44 for SharePoint 2019. It discloses full pathnames via Virto.SharePoint.FileDownloader/Api/Download.ashx?action=archive.

CVSS: 5.3 · CWE: CWE-200

View on NVD

]]> [Critical] CVE-2024-33879 – An issue was discovered in VirtoSoftware Virto Bulk File Download 5.5.44 for Sha... https://nvd.nist.gov/vuln/detail/CVE-2024-33879 https://nvd.nist.gov/vuln/detail/CVE-2024-33879 Mon, 24 Jun 2024 17:15:10 +0000 Critical CVE-2024-33879

An issue was discovered in VirtoSoftware Virto Bulk File Download 5.5.44 for SharePoint 2019. The Virto.SharePoint.FileDownloader/Api/Download.ashx isCompleted method allows arbitrary file download and deletion via absolute path traversal in the path parameter.

CVSS: 9.8 · CWE: CWE-22

View on NVD

]]> [High] CVE-2024-30100 – Microsoft SharePoint Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-30100 https://nvd.nist.gov/vuln/detail/CVE-2024-30100 Tue, 11 Jun 2024 17:15:59 +0000 High CVE-2024-30100

Microsoft SharePoint Server Remote Code Execution Vulnerability

CVSS: 7.8 · CWE: CWE-426

View on NVD

]]> [High] CVE-2024-30044 – Microsoft SharePoint Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-30044 https://nvd.nist.gov/vuln/detail/CVE-2024-30044 Tue, 14 May 2024 17:17:16 +0000 High CVE-2024-30044

Microsoft SharePoint Server Remote Code Execution Vulnerability

CVSS: 7.2 · CWE: CWE-502

View on NVD

]]> [Medium] CVE-2024-30043 – Microsoft SharePoint Server Information Disclosure Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-30043 https://nvd.nist.gov/vuln/detail/CVE-2024-30043 Tue, 14 May 2024 17:17:15 +0000 Medium CVE-2024-30043

Microsoft SharePoint Server Information Disclosure Vulnerability

CVSS: 6.5 · CWE: CWE-611

View on NVD

]]> [Medium] CVE-2024-26251 – Microsoft SharePoint Server Spoofing Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-26251 https://nvd.nist.gov/vuln/detail/CVE-2024-26251 Tue, 09 Apr 2024 17:15:46 +0000 Medium CVE-2024-26251

Microsoft SharePoint Server Spoofing Vulnerability

CVSS: 6.8 · CWE: CWE-79

View on NVD

]]> [High] CVE-2024-21426 – Microsoft SharePoint Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-21426 https://nvd.nist.gov/vuln/detail/CVE-2024-21426 Tue, 12 Mar 2024 17:15:51 +0000 High CVE-2024-21426

Microsoft SharePoint Server Remote Code Execution Vulnerability

CVSS: 7.8 · CWE: CWE-416

View on NVD

]]> [High] CVE-2024-21318 – Microsoft SharePoint Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-21318 https://nvd.nist.gov/vuln/detail/CVE-2024-21318 Tue, 09 Jan 2024 18:15:55 +0000 High CVE-2024-21318

Microsoft SharePoint Server Remote Code Execution Vulnerability

CVSS: 8.8 · CWE: CWE-502

View on NVD

]]> [Medium] CVE-2023-38177 – Microsoft SharePoint Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-38177 https://nvd.nist.gov/vuln/detail/CVE-2023-38177 Tue, 14 Nov 2023 18:15:51 +0000 Medium CVE-2023-38177

Microsoft SharePoint Server Remote Code Execution Vulnerability

CVSS: 6.1 · CWE: CWE-502

View on NVD

]]> [Medium] CVE-2023-46666 – An issue was discovered when using Document Level Security and the SPO "Limited ... https://nvd.nist.gov/vuln/detail/CVE-2023-46666 https://nvd.nist.gov/vuln/detail/CVE-2023-46666 Thu, 26 Oct 2023 17:15:09 +0000 Medium CVE-2023-46666

An issue was discovered when using Document Level Security and the SPO "Limited Access" functionality in Elastic Sharepoint Online Python Connector. If a user is assigned limited access permissions to an item on a Sharepoint site then that user would have read permissions to all content on the Sharepoint site through Elasticsearch.

CVSS: 5.3 · CWE: CWE-284

View on NVD

]]> [High] CVE-2023-36764 – Microsoft SharePoint Server Elevation of Privilege Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-36764 https://nvd.nist.gov/vuln/detail/CVE-2023-36764 Tue, 12 Sep 2023 17:15:12 +0000 High CVE-2023-36764

Microsoft SharePoint Server Elevation of Privilege Vulnerability

CVSS: 8.8 · CWE: CWE-73

View on NVD

]]> [High] CVE-2023-35785 – Zoho ManageEngine Active Directory 360 versions 4315 and below, ADAudit Plus 720... https://nvd.nist.gov/vuln/detail/CVE-2023-35785 https://nvd.nist.gov/vuln/detail/CVE-2023-35785 Mon, 28 Aug 2023 20:15:08 +0000 High CVE-2023-35785

Zoho ManageEngine Active Directory 360 versions 4315 and below, ADAudit Plus 7202 and below, ADManager Plus 7200 and below, Asset Explorer 6993 and below and 7xxx 7002 and below, Cloud Security Plus 4161 and below, Data Security Plus 6110 and below, Eventlog Analyzer 12301 and below, Exchange Reporter Plus 5709 and below, Log360 5315 and below, Log360 UEBA 4045 and below, M365 Manager Plus 4529 a…

CVSS: 8.1 · CWE: CWE-287

View on NVD

]]> [Medium] CVE-2023-36894 – Microsoft SharePoint Server Information Disclosure Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-36894 https://nvd.nist.gov/vuln/detail/CVE-2023-36894 Tue, 08 Aug 2023 18:15:15 +0000 Medium CVE-2023-36894

Microsoft SharePoint Server Information Disclosure Vulnerability

CVSS: 6.5 · CWE: CWE-200

View on NVD

]]> [High] CVE-2023-36892 – Microsoft SharePoint Server Spoofing Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-36892 https://nvd.nist.gov/vuln/detail/CVE-2023-36892 Tue, 08 Aug 2023 18:15:15 +0000 High CVE-2023-36892

Microsoft SharePoint Server Spoofing Vulnerability

CVSS: 8.0 · CWE: CWE-79

View on NVD

]]> [High] CVE-2023-36891 – Microsoft SharePoint Server Spoofing Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-36891 https://nvd.nist.gov/vuln/detail/CVE-2023-36891 Tue, 08 Aug 2023 18:15:15 +0000 High CVE-2023-36891

Microsoft SharePoint Server Spoofing Vulnerability

CVSS: 8.0 · CWE: CWE-79

View on NVD

]]> [Medium] CVE-2023-36890 – Microsoft SharePoint Server Information Disclosure Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-36890 https://nvd.nist.gov/vuln/detail/CVE-2023-36890 Tue, 08 Aug 2023 18:15:15 +0000 Medium CVE-2023-36890

Microsoft SharePoint Server Information Disclosure Vulnerability

CVSS: 6.5 · CWE: CWE-284

View on NVD

]]> [Medium] CVE-2023-33165 – Microsoft SharePoint Server Security Feature Bypass Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-33165 https://nvd.nist.gov/vuln/detail/CVE-2023-33165 Tue, 11 Jul 2023 18:15:15 +0000 Medium CVE-2023-33165

Microsoft SharePoint Server Security Feature Bypass Vulnerability

CVSS: 4.3 · CWE: CWE-200

View on NVD

]]> [High] CVE-2023-33160 – Microsoft SharePoint Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-33160 https://nvd.nist.gov/vuln/detail/CVE-2023-33160 Tue, 11 Jul 2023 18:15:15 +0000 High CVE-2023-33160

Microsoft SharePoint Server Remote Code Execution Vulnerability

CVSS: 8.8 · CWE: CWE-502

View on NVD

]]> [High] CVE-2023-33159 – Microsoft SharePoint Server Spoofing Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-33159 https://nvd.nist.gov/vuln/detail/CVE-2023-33159 Tue, 11 Jul 2023 18:15:15 +0000 High CVE-2023-33159

Microsoft SharePoint Server Spoofing Vulnerability

CVSS: 8.8 · CWE: CWE-79

View on NVD

]]> [High] CVE-2023-33157 – Microsoft SharePoint Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-33157 https://nvd.nist.gov/vuln/detail/CVE-2023-33157 Tue, 11 Jul 2023 18:15:14 +0000 High CVE-2023-33157

Microsoft SharePoint Remote Code Execution Vulnerability

CVSS: 8.8 · CWE: CWE-94

View on NVD

]]> [High] CVE-2023-33134 – Microsoft SharePoint Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-33134 https://nvd.nist.gov/vuln/detail/CVE-2023-33134 Tue, 11 Jul 2023 18:15:14 +0000 High CVE-2023-33134

Microsoft SharePoint Server Remote Code Execution Vulnerability

CVSS: 8.8 · CWE: CWE-502

View on NVD

]]> [Medium] CVE-2023-33142 – Microsoft SharePoint Server Elevation of Privilege Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-33142 https://nvd.nist.gov/vuln/detail/CVE-2023-33142 Wed, 14 Jun 2023 00:15:12 +0000 Medium CVE-2023-33142

Microsoft SharePoint Server Elevation of Privilege Vulnerability

CVSS: 6.5 · CWE: CWE-285

View on NVD

]]> [Medium] CVE-2023-33132 – Microsoft SharePoint Server Spoofing Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-33132 https://nvd.nist.gov/vuln/detail/CVE-2023-33132 Wed, 14 Jun 2023 00:15:12 +0000 Medium CVE-2023-33132

Microsoft SharePoint Server Spoofing Vulnerability

CVSS: 6.3 · CWE: CWE-79

View on NVD

]]> [High] CVE-2023-33130 – Microsoft SharePoint Server Spoofing Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-33130 https://nvd.nist.gov/vuln/detail/CVE-2023-33130 Wed, 14 Jun 2023 00:15:12 +0000 High CVE-2023-33130

Microsoft SharePoint Server Spoofing Vulnerability

CVSS: 7.3 · CWE: CWE-79

View on NVD

]]> [Medium] CVE-2023-33129 – Microsoft SharePoint Server Denial of Service Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-33129 https://nvd.nist.gov/vuln/detail/CVE-2023-33129 Wed, 14 Jun 2023 00:15:11 +0000 Medium CVE-2023-33129

Microsoft SharePoint Server Denial of Service Vulnerability

CVSS: 6.5 · CWE: CWE-122

View on NVD

]]> [Critical] CVE-2023-29357 – Microsoft SharePoint Server Elevation of Privilege Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-29357 https://nvd.nist.gov/vuln/detail/CVE-2023-29357 Wed, 14 Jun 2023 00:15:09 +0000 Critical CVE-2023-29357

Microsoft SharePoint Server Elevation of Privilege Vulnerability

CVSS: 9.8 · CWE: CWE-303

View on NVD

]]> [High] CVE-2023-24955 – Microsoft SharePoint Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-24955 https://nvd.nist.gov/vuln/detail/CVE-2023-24955 Tue, 09 May 2023 18:15:13 +0000 High CVE-2023-24955

Microsoft SharePoint Server Remote Code Execution Vulnerability

CVSS: 7.2 · CWE: CWE-94

View on NVD

]]> [Medium] CVE-2023-24954 – Microsoft SharePoint Server Information Disclosure Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-24954 https://nvd.nist.gov/vuln/detail/CVE-2023-24954 Tue, 09 May 2023 18:15:13 +0000 Medium CVE-2023-24954

Microsoft SharePoint Server Information Disclosure Vulnerability

CVSS: 6.5 · CWE: CWE-918

View on NVD

]]> [Medium] CVE-2023-24950 – Microsoft SharePoint Server Spoofing Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-24950 https://nvd.nist.gov/vuln/detail/CVE-2023-24950 Tue, 09 May 2023 18:15:13 +0000 Medium CVE-2023-24950

Microsoft SharePoint Server Spoofing Vulnerability

CVSS: 6.5 · CWE: CWE-20

View on NVD

]]> [High] CVE-2023-28288 – Microsoft SharePoint Server Spoofing Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-28288 https://nvd.nist.gov/vuln/detail/CVE-2023-28288 Tue, 11 Apr 2023 21:15:27 +0000 High CVE-2023-28288

Microsoft SharePoint Server Spoofing Vulnerability

CVSS: 8.1 · CWE: CWE-918

View on NVD

]]> [Critical] CVE-2023-29375 – An issue was discovered in Progress Sitefinity 13.3 before 13.3.7647, 14.0 befor... https://nvd.nist.gov/vuln/detail/CVE-2023-29375 https://nvd.nist.gov/vuln/detail/CVE-2023-29375 Mon, 10 Apr 2023 15:15:07 +0000 Critical CVE-2023-29375

An issue was discovered in Progress Sitefinity 13.3 before 13.3.7647, 14.0 before 14.0.7736, 14.1 before 14.1.7826, 14.2 before 14.2.7930, and 14.3 before 14.3.8025. There is potentially dangerous file upload through the SharePoint connector.

CVSS: 9.8 · CWE: CWE-434

View on NVD

]]> [Low] CVE-2023-23395 – Microsoft SharePoint Server Spoofing Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-23395 https://nvd.nist.gov/vuln/detail/CVE-2023-23395 Tue, 14 Mar 2023 17:15:13 +0000 Low CVE-2023-23395

Microsoft SharePoint Server Spoofing Vulnerability

CVSS: 3.1 · CWE: CWE-601

View on NVD

]]> [High] CVE-2023-21717 – Microsoft SharePoint Server Elevation of Privilege Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-21717 https://nvd.nist.gov/vuln/detail/CVE-2023-21717 Tue, 14 Feb 2023 20:15:14 +0000 High CVE-2023-21717

Microsoft SharePoint Server Elevation of Privilege Vulnerability

CVSS: 8.8 · CWE: CWE-284

View on NVD

]]>