Vulnerability index

Browse CVEs

356 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Cross-site Scripting (XSS)CWE-79 × clear
Sharepoint Foundation MEDIUM 5.7
CVE-2019-0950

A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint…

Patch available
Fix from $1,600 2019-05-16
Sharepoint Foundation MEDIUM 5.4
CVE-2019-0951

A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint…

Patch available
Fix from $1,600 2019-05-16
Sharepoint Foundation MEDIUM 5.4
CVE-2019-0963

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an a…

Patch available
Fix from $1,600 2019-05-16
Team Foundation Server MEDIUM 5.4
CVE-2019-0979

A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, a…

Patch available
Fix from $1,600 2019-05-16
Team Foundation Server MEDIUM 5.4
CVE-2019-0872

A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, a…

Patch available
Fix from $1,600 2019-05-16
Azure Devops Server MEDIUM 6.1
CVE-2019-0874

A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly sanitize user provided input, aka 'Azure DevOps Server C…

Patch available
Fix from $1,600 2019-04-09
Exchange Server MEDIUM 6.1
CVE-2019-0858

A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access (OWA) fails to properly handle web requests, aka 'Microsoft Exch…

Patch available
Fix from $1,600 2019-04-09
Azure Devops Server MEDIUM 6.1
CVE-2019-0866

A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, a…

Patch available
Fix from $1,600 2019-04-09
Azure Devops Server MEDIUM 6.1
CVE-2019-0867

A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, a…

Patch available
Fix from $1,600 2019-04-09
Team Foundation Server MEDIUM 6.1
CVE-2019-0868

A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, a…

Patch available
Fix from $1,600 2019-04-09
Azure Devops Server MEDIUM 6.1
CVE-2019-0869

A spoofing vulnerability exists in Microsoft Azure DevOps Server when it fails to properly handle web requests, aka 'Azure DevOps Server HTML Injecti…

Patch available
Fix from $1,600 2019-04-09
Azure Devops Server MEDIUM 6.1
CVE-2019-0870

A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, a…

Patch available
Fix from $1,600 2019-04-09
Team Foundation Server MEDIUM 6.1
CVE-2019-0871

A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, a…

Patch available
Fix from $1,600 2019-04-09
Sharepoint Enterprise Server MEDIUM 5.4
CVE-2019-0830

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an a…

Patch available
Fix from $1,600 2019-04-09
Sharepoint Enterprise Server MEDIUM 5.4
CVE-2019-0831

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an a…

Patch available
Fix from $1,600 2019-04-09
Lync Server MEDIUM 6.1
CVE-2019-0798

A spoofing vulnerability exists when a Lync Server or Skype for Business Server does not properly sanitize a specially crafted request, aka 'Skype fo…

Patch available
Fix from $1,600 2019-04-09
Team Foundation Server MEDIUM 5.4
CVE-2019-0777

A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Se…

Patch available
Fix from $1,600 2019-04-09
Sharepoint Enterprise Server MEDIUM 5.4
CVE-2019-0778

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an a…

Patch available
Fix from $1,600 2019-04-09
Sharepoint Enterprise Server HIGH 8.8
CVE-2019-0668

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affe…

Patch available
Fix from $1,950 2019-03-05
Team Foundation Server MEDIUM 5.4
CVE-2019-0742

A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Se…

Patch available
Fix from $1,600 2019-03-05
Team Foundation Server MEDIUM 5.4
CVE-2019-0743

A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Se…

Patch available
Fix from $1,600 2019-03-05
Skype For Business MEDIUM 5.4
CVE-2019-0624

A spoofing vulnerability exists when a Skype for Business 2015 server does not properly sanitize a specially crafted request, aka "Skype for Business…

Patch available
Fix from $1,600 2019-01-17
Team Foundation Server MEDIUM 5.4
CVE-2019-0646

A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka "Team Foundation Se…

Patch available
Fix from $1,600 2019-01-17
Sharepoint Server MEDIUM 5.4
CVE-2019-0556

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an a…

Patch available
Fix from $1,600 2019-01-08
Sharepoint Server MEDIUM 5.4
CVE-2019-0557

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an a…

Patch available
Fix from $1,600 2019-01-08
Business Productivity Servers MEDIUM 5.4
CVE-2019-0558

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an a…

Patch available
Fix from $1,600 2019-01-08
Sharepoint Enterprise Server MEDIUM 5.4
CVE-2018-8650

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an a…

Patch available
Fix from $1,600 2018-12-12
Dynamics Nav MEDIUM 5.4
CVE-2018-8651

A cross site scripting vulnerability exists when Microsoft Dynamics NAV does not properly sanitize a specially crafted web request to an affected Dyn…

Patch available
Fix from $1,600 2018-12-12
Windows Azure Pack Rollup MEDIUM 5.4
CVE-2018-8652

A Cross-site Scripting (XSS) vulnerability exists when Windows Azure Pack does not properly sanitize user-provided input, aka "Windows Azure Pack Cro…

Patch available
Fix from $1,600 2018-12-12
Azure App Service On Azure Stack MEDIUM 6.1
CVE-2018-8600

A Cross-site Scripting (XSS) vulnerability exists when Azure App Services on Azure Stack does not properly sanitize user provided input, aka "Azure A…

Patch available
Fix from $1,600 2018-11-14