Vulnerability index

Browse CVEs

356 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Cross-site Scripting (XSS)CWE-79 × clear
MEDIUM 5.4 CVE-2020-0891 This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server.An authen… Sharepoint Enterprise Server Patch available Fix from $1,6002020-03-12 MEDIUM 5.4 CVE-2020-0893 A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an a… Sharepoint Enterprise Server Patch available Fix from $1,6002020-03-12 MEDIUM 5.4 CVE-2020-0894 A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an a… Sharepoint Enterprise Server Patch available Fix from $1,6002020-03-12 CRITICAL 9.6 CVE-2020-0872EPSS 10% A remote code execution vulnerability exists in Application Inspector version v1.0.23 or earlier when the tool reflects example code snippets from th… Application Inspector after 1.0.23 Fix from $2,3002020-03-12 MEDIUM 5.4 CVE-2020-0795 This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server.An authen… Business Productivity Servers Patch available Fix from $1,6002020-03-12 MEDIUM 5.4 CVE-2020-0700 A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly sanitize user provided input, aka 'Azure DevOps Server C… Team Foundation Server Patch available Fix from $1,6002020-03-12 MEDIUM 5.4 CVE-2020-0693 A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an a… Sharepoint Enterprise Server Patch available Fix from $1,6002020-02-11 MEDIUM 5.4 CVE-2020-0694 A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an a… Sharepoint Enterprise Server Patch available Fix from $1,6002020-02-11 MEDIUM 5.4 CVE-2020-0656 A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to a… Dynamics 365 Patch available Fix from $1,6002020-01-14 MEDIUM 6.1 CVE-2019-1332EPSS 7% A cross-site scripting (XSS) vulnerability exists when Microsoft SQL Server Reporting Services (SSRS) does not properly sanitize a specially-crafted … Power Bi Report Server Patch available Fix from $1,6002019-12-10 MEDIUM 5.4 CVE-2019-1375 A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to a… Dynamics 365 9.0.9.4+ Fix from $1,6002019-10-10 MEDIUM 5.4 CVE-2019-1328 A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint… Sharepoint Enterprise Server Patch available Fix from $1,6002019-10-10 MEDIUM 5.4 CVE-2019-1329 An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affe… Sharepoint Enterprise Server Patch available Fix from $1,6002019-10-10 MEDIUM 5.4 CVE-2019-1070 A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an a… Sharepoint Enterprise Server Patch available Fix from $1,6002019-10-10 MEDIUM 5.4 CVE-2019-1305 A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Se… Team Foundation Server Patch available Fix from $1,6002019-09-11 MEDIUM 6.1 CVE-2019-1266 A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web App (OWA) fails to properly handle web requests, aka 'Microsoft Exchang… Exchange Server Patch available Fix from $1,6002019-09-11 MEDIUM 5.4 CVE-2019-1273 A cross-site-scripting (XSS) vulnerability exists when Active Directory Federation Services (ADFS) does not properly sanitize certain error messages,… Windows 10 Patch available Fix from $1,6002019-09-11 MEDIUM 5.4 CVE-2019-1262 A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an a… Sharepoint Foundation Patch available Fix from $1,6002019-09-11 MEDIUM 5.4 CVE-2019-1203 A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an a… Sharepoint Enterprise Server Patch available Fix from $1,6002019-08-14 MEDIUM 5.4 CVE-2019-1218 A spoofing vulnerability exists in the way Microsoft Outlook iOS software parses specifically crafted email messages. An authenticated attacker could… Outlook Patch available Fix from $1,6002019-08-14 MEDIUM 5.4 CVE-2019-1105 A spoofing vulnerability exists in the way Microsoft Outlook for Android software parses specifically crafted email messages. An authenticated attack… Outlook Patch available Fix from $1,6002019-07-29 MEDIUM 5.4 CVE-2019-1134 A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an a… Sharepoint Enterprise Server Patch available Fix from $1,6002019-07-15 MEDIUM 5.4 CVE-2019-1137 A cross-site-scripting (XSS) vulnerability exists when Microsoft Exchange Server does not properly sanitize a specially crafted web request to an aff… Exchange Server Patch available Fix from $1,6002019-07-15 MEDIUM 5.4 CVE-2019-1076 A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Se… Team Foundation Server Patch available Fix from $1,6002019-07-15 MEDIUM 5.4 CVE-2019-1031 A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an a… Project Server Patch available Fix from $1,6002019-06-12 MEDIUM 5.4 CVE-2019-1032 A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an a… Sharepoint Enterprise Server Patch available Fix from $1,6002019-06-12 MEDIUM 5.4 CVE-2019-1033 A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an a… Project Server Patch available Fix from $1,6002019-06-12 MEDIUM 5.4 CVE-2019-1036 A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an a… Project Server Patch available Fix from $1,6002019-06-12 HIGH 8.8 CVE-2019-0958 An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affe… Sharepoint Foundation Patch available Fix from $1,9502019-05-16 MEDIUM 5.7 CVE-2019-0949 A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint… Sharepoint Foundation Patch available Fix from $1,6002019-05-16