Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

11 records

Priority MEDIUM 41

<p>A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server.

CVSS 3.1HIGH 8.7 Network Low privileges User interaction EPSS 0.01612 Published 2020-10-16 Fixed in publication CWE-79
Priority LOW 29

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.01882 Published 2020-08-17 Fixed in publication CWE-79
Priority MEDIUM 53

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, Excel Viewer, Excel Services on SharePoint Server 2007 SP3, Excel Services on SharePoint Server 2010…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.19867 Published 2016-09-14 No fix listed CWE-119
Priority MEDIUM 51

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, Excel Viewer, Excel Services on SharePoint Server 2007 SP3, Excel Services on SharePoint Server 2010…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.17466 Published 2016-09-14 No fix listed CWE-119
Priority MEDIUM 51

Microsoft PowerPoint 2007 SP3, PowerPoint 2010 SP2, PowerPoint 2013 SP1, PowerPoint 2013 RT SP1, PowerPoint 2016 for Mac, Office Compatibility Pack SP3, PowerPoint Viewer, SharePoint Server 2013 SP1, Office Web Apps 2010…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.17235 Published 2016-09-14 No fix listed CWE-119
Priority MEDIUM 52

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel 2016 for Mac, Office Compatibility Pack SP3, Excel Viewer, Excel Services on SharePoint Server 2007 SP3, Excel Services on Sh…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.18434 Published 2016-09-14 No fix listed CWE-119
Priority MEDIUM 53

Microsoft Excel 2007 SP3, Excel 2010 SP2, Office Compatibility Pack SP3, Excel Services on SharePoint Server 2007 SP3, and Excel Services on SharePoint Server 2010 SP2 allow remote attackers to execute arbitrary code via…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.20232 Published 2016-04-12 No fix listed CWE-119
Priority MEDIUM 56

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Office for Mac 2011, Excel Viewer 2007 SP3, Office Compatibility Pack SP3, Excel Services on SharePoint Server 2007 SP3, Excel Services on Shar…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.15639 Published 2015-07-14 No fix listed CWE-119
Priority MEDIUM 54

Microsoft Windows SharePoint Services 3.0 SP3; SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013 Gold and SP1; SharePoint Foundation 2010 SP1 and SP2 and 2013 Gold and SP1; Project Server 2010 SP1 and SP2 and 2013 G…

CVSS 2.0HIGH 9.0 Network Low privileges Interaction — EPSS 0.14214 Published 2014-05-14 No fix listed CWE-94