Vulnerability index

Browse CVEs

356 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Cross-site Scripting (XSS)CWE-79 × clear
Sharepoint Enterprise Server MEDIUM 5.4
CVE-2018-1005

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affe…

Patch available
Fix from $1,600 2018-04-12
Sharepoint Enterprise Server MEDIUM 5.4
CVE-2018-1014

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affe…

Patch available
Fix from $1,600 2018-04-12
Sharepoint Enterprise Server HIGH 8.8
CVE-2018-0947

Microsoft SharePoint Foundation 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how spe…

Patch available
Fix from $1,950 2018-03-14
Sharepoint Enterprise Server HIGH 8.8
CVE-2018-0923

Microsoft SharePoint Enterprise Server 2016 allows an elevation of privilege vulnerability to due how specially crafted web requests are sanitized, a…

Patch available
Fix from $1,950 2018-03-14
Project Server HIGH 8.8
CVE-2018-0944

Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allows an elevation of privilege vulnerability to due how specially…

Patch available
Fix from $1,950 2018-03-14
Project Server HIGH 8.8
CVE-2018-0909

Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how specially …

Patch available
Fix from $1,950 2018-03-14
Project Server HIGH 8.8
CVE-2018-0910

Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how specially …

Patch available
Fix from $1,950 2018-03-14
Project Server HIGH 8.8
CVE-2018-0911

Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how specially …

Patch available
Fix from $1,950 2018-03-14
Project Server HIGH 8.8
CVE-2018-0912

Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how specially …

Patch available
Fix from $1,950 2018-03-14
Project Server HIGH 8.8
CVE-2018-0913

Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how specially …

Patch available
Fix from $1,950 2018-03-14
Project Server HIGH 8.8
CVE-2018-0914

Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how specially …

Patch available
Fix from $1,950 2018-03-14
Project Server HIGH 8.8
CVE-2018-0915

Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how specially …

Patch available
Fix from $1,950 2018-03-14
Project Server HIGH 8.8
CVE-2018-0916

Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how specially …

Patch available
Fix from $1,950 2018-03-14
Sharepoint Enterprise Server HIGH 8.8
CVE-2018-0917

Microsoft SharePoint Enterprise Server 2016 allows an elevation of privilege vulnerability to due how specially crafted web requests are sanitized, a…

Patch available
Fix from $1,950 2018-03-14
Sharepoint Enterprise Server HIGH 8.8
CVE-2018-0921

Microsoft SharePoint Enterprise Server 2016 allows an elevation of privilege vulnerability to due how specially crafted web requests are sanitized, a…

Patch available
Fix from $1,950 2018-03-14
Identity Manager MEDIUM 6.1
CVE-2018-0908

Microsoft Identity Manager 2016 SP1 allows an attacker to gain elevated privileges when it does not properly sanitize a specially crafted attribute v…

Patch available
Fix from $1,600 2018-02-26
Sharepoint Server MEDIUM 5.4
CVE-2018-0864

SharePoint Project Server 2013 and SharePoint Enterprise Server 2016 allow an information disclosure vulnerability due to how web requests are handle…

Patch available
Fix from $1,600 2018-02-15
Sharepoint Enterprise Server MEDIUM 5.4
CVE-2018-0869

SharePoint Server 2016 allows an elevation of privilege vulnerability due to how web requests are handled, aka "Microsoft SharePoint Elevation of Pri…

Patch available
Fix from $1,600 2018-02-15
Sharepoint Enterprise Server MEDIUM 6.1
CVE-2018-0799

Microsoft Access in Microsoft SharePoint Enterprise Server 2013 and Microsoft SharePoint Enterprise Server 2016 allows a cross-site-scripting (XSS) v…

Patch available
Fix from $1,600 2018-01-10
Sharepoint Enterprise Server MEDIUM 5.4
CVE-2017-11820

Microsoft SharePoint Enterprise Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an attacker to exploit a cross-site scripting (…

Patch available
Fix from $1,600 2017-10-13
Sharepoint Enterprise Server MEDIUM 5.4
CVE-2017-11775

Microsoft SharePoint Enterprise Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an attacker to exploit a cross-site scripting (…

Patch available
Fix from $1,600 2017-10-13
Sharepoint Enterprise Server MEDIUM 5.4
CVE-2017-11777

Microsoft SharePoint Enterprise Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an attacker to exploit a cross-site scripting (…

Patch available
Fix from $1,600 2017-10-13
Exchange Server MEDIUM 6.1
CVE-2017-8758

Microsoft Exchange Server 2016 allows an elevation of privilege vulnerability when Microsoft Exchange Outlook Web Access (OWA) fails to properly hand…

Patch available
Fix from $1,600 2017-09-13
Sharepoint Foundation MEDIUM 5.4
CVE-2017-8745

An elevation of privilege vulnerability exists in Microsoft SharePoint Foundation 2013 Service Pack 1 when it does not properly sanitize a specially …

Patch available
Fix from $1,600 2017-09-13
Sharepoint Server MEDIUM 5.4
CVE-2017-8629

Microsoft SharePoint Server 2013 Service Pack 1 allows an elevation of privilege vulnerability when it fails to properly sanitize a specially crafted…

Patch available
Fix from $1,600 2017-09-13
Edge MEDIUM 6.1
CVE-2017-8642

Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to elevate privileges due to the way that Microsoft Edge validates JavaScript under sp…

Patch available
Fix from $1,600 2017-08-08
Sharepoint Server MEDIUM 5.4
CVE-2017-8654

Microsoft SharePoint Server 2010 Service Pack 2 allows a cross-site scripting (XSS) vulnerability when it does not properly sanitize a specially craf…

Patch available
Fix from $1,600 2017-08-08
Sharepoint Server HIGH 8.8
CVE-2017-8569EPSS 5%

Microsoft SharePoint Server allows an elevation of privilege vulnerability due to the way that it sanitizes a specially crafted web request to an aff…

Patch available
Fix from $1,950 2017-07-11
Exchange Server MEDIUM 6.1
CVE-2017-8559

Microsoft Exchange Server 2010 SP3, Exchange Server 2013 SP3, Exchange Server 2013 CU16, and Exchange Server 2016 CU5 allows an elevation of privileg…

Patch available
Fix from $1,600 2017-07-11
Exchange Server MEDIUM 6.1
CVE-2017-8560

Microsoft Exchange Server 2010 SP3, Exchange Server 2013 SP3, Exchange Server 2013 CU16, and Exchange Server 2016 CU5 allows an elevation of privileg…

Patch available
Fix from $1,600 2017-07-11