Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Sharepoint_enterprise_server
(Microsoft)Repositories |
Unknown: This might be proprietary software. |
#Vulnerabilities | 242 |
Date | Id | Summary | Products | Score | Patch | Annotated |
---|---|---|---|---|---|---|
2017-10-13 | CVE-2017-11775 | Microsoft SharePoint Enterprise Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an attacker to exploit a cross-site scripting (XSS) vulnerability by sending a specially crafted request to an affected SharePoint server, due to how SharePoint Server sanitizes web requests, aka "Microsoft Office SharePoint XSS Vulnerability". This CVE ID is unique from CVE-2017-11777 and CVE-2017-11820. | Sharepoint_enterprise_server | 5.4 | ||
2017-01-10 | CVE-2017-0003 | Microsoft Word 2016 and SharePoint Enterprise Server 2016 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability." | Sharepoint_enterprise_server, Word | 7.8 |