Vulnerability index

Browse CVEs

356 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Cross-site Scripting (XSS)CWE-79 × clear
Sharepoint Enterprise Server MEDIUM 5.4
CVE-2020-0891

This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server.An authen…

Patch available
Fix from $1,600 2020-03-12
Sharepoint Enterprise Server MEDIUM 5.4
CVE-2020-0893

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an a…

Patch available
Fix from $1,600 2020-03-12
Sharepoint Enterprise Server MEDIUM 5.4
CVE-2020-0894

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an a…

Patch available
Fix from $1,600 2020-03-12
Application Inspector CRITICAL 9.6
CVE-2020-0872EPSS 10%

A remote code execution vulnerability exists in Application Inspector version v1.0.23 or earlier when the tool reflects example code snippets from th…

Fix: after 1.0.23
Fix from $2,300 2020-03-12
Business Productivity Servers MEDIUM 5.4
CVE-2020-0795

This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server.An authen…

Patch available
Fix from $1,600 2020-03-12
Team Foundation Server MEDIUM 5.4
CVE-2020-0700

A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly sanitize user provided input, aka 'Azure DevOps Server C…

Patch available
Fix from $1,600 2020-03-12
Sharepoint Enterprise Server MEDIUM 5.4
CVE-2020-0693

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an a…

Patch available
Fix from $1,600 2020-02-11
Sharepoint Enterprise Server MEDIUM 5.4
CVE-2020-0694

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an a…

Patch available
Fix from $1,600 2020-02-11
Dynamics 365 MEDIUM 5.4
CVE-2020-0656

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to a…

Patch available
Fix from $1,600 2020-01-14
Power Bi Report Server MEDIUM 6.1
CVE-2019-1332EPSS 7%

A cross-site scripting (XSS) vulnerability exists when Microsoft SQL Server Reporting Services (SSRS) does not properly sanitize a specially-crafted …

Patch available
Fix from $1,600 2019-12-10
Dynamics 365 MEDIUM 5.4
CVE-2019-1375

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to a…

Fix: 9.0.9.4+
Fix from $1,600 2019-10-10
Sharepoint Enterprise Server MEDIUM 5.4
CVE-2019-1328

A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint…

Patch available
Fix from $1,600 2019-10-10
Sharepoint Enterprise Server MEDIUM 5.4
CVE-2019-1329

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affe…

Patch available
Fix from $1,600 2019-10-10
Sharepoint Enterprise Server MEDIUM 5.4
CVE-2019-1070

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an a…

Patch available
Fix from $1,600 2019-10-10
Team Foundation Server MEDIUM 5.4
CVE-2019-1305

A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Se…

Patch available
Fix from $1,600 2019-09-11
Exchange Server MEDIUM 6.1
CVE-2019-1266

A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web App (OWA) fails to properly handle web requests, aka 'Microsoft Exchang…

Patch available
Fix from $1,600 2019-09-11
Windows 10 MEDIUM 5.4
CVE-2019-1273

A cross-site-scripting (XSS) vulnerability exists when Active Directory Federation Services (ADFS) does not properly sanitize certain error messages,…

Patch available
Fix from $1,600 2019-09-11
Sharepoint Foundation MEDIUM 5.4
CVE-2019-1262

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an a…

Patch available
Fix from $1,600 2019-09-11
Sharepoint Enterprise Server MEDIUM 5.4
CVE-2019-1203

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an a…

Patch available
Fix from $1,600 2019-08-14
Outlook MEDIUM 5.4
CVE-2019-1218

A spoofing vulnerability exists in the way Microsoft Outlook iOS software parses specifically crafted email messages. An authenticated attacker could…

Patch available
Fix from $1,600 2019-08-14
Outlook MEDIUM 5.4
CVE-2019-1105

A spoofing vulnerability exists in the way Microsoft Outlook for Android software parses specifically crafted email messages. An authenticated attack…

Patch available
Fix from $1,600 2019-07-29
Sharepoint Enterprise Server MEDIUM 5.4
CVE-2019-1134

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an a…

Patch available
Fix from $1,600 2019-07-15
Exchange Server MEDIUM 5.4
CVE-2019-1137

A cross-site-scripting (XSS) vulnerability exists when Microsoft Exchange Server does not properly sanitize a specially crafted web request to an aff…

Patch available
Fix from $1,600 2019-07-15
Team Foundation Server MEDIUM 5.4
CVE-2019-1076

A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Se…

Patch available
Fix from $1,600 2019-07-15
Project Server MEDIUM 5.4
CVE-2019-1031

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an a…

Patch available
Fix from $1,600 2019-06-12
Sharepoint Enterprise Server MEDIUM 5.4
CVE-2019-1032

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an a…

Patch available
Fix from $1,600 2019-06-12
Project Server MEDIUM 5.4
CVE-2019-1033

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an a…

Patch available
Fix from $1,600 2019-06-12
Project Server MEDIUM 5.4
CVE-2019-1036

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an a…

Patch available
Fix from $1,600 2019-06-12
Sharepoint Foundation HIGH 8.8
CVE-2019-0958

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affe…

Patch available
Fix from $1,950 2019-05-16
Sharepoint Foundation MEDIUM 5.7
CVE-2019-0949

A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint…

Patch available
Fix from $1,600 2019-05-16