« Volver al listado

Microsoft

Microsoft Sharepoint Foundation: vulnerabilidades y CVE

Microsoft Sharepoint Foundation tiene 226 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 4 son críticas y 1 figuran en el catálogo de explotación activa de CISA.

CVE226
Últimos 12 meses0
Críticas4
Explotadas activamente1

Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología

🔴 Explotadas activamente (CISA KEV)

CVESeveridadEPSSExplotación activaPublicadaDescripción
CVE-2019-0604Crítica (9.8)100%⚠ Explotación activa5 mar 2019
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE…

Últimas vulnerabilidades

CVESeveridadEPSSExplotación activaPublicadaDescripción
CVE-2023-28288Alta (8.1)6.2%—11 abr 2023
Microsoft SharePoint Server Spoofing Vulnerability
CVE-2023-23395Baja (3.1)0.60%—14 mar 2023
Microsoft SharePoint Server Spoofing Vulnerability
CVE-2023-21717Alta (8.8)1.1%—14 feb 2023
Microsoft SharePoint Server Elevation of Privilege Vulnerability
CVE-2023-21716Crítica (9.8)85%—14 feb 2023
Microsoft Word Remote Code Execution Vulnerability
CVE-2023-21744Alta (8.8)2.8%—10 ene 2023
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2023-21742Alta (8.8)56%—10 ene 2023
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2022-44693Alta (8.8)2.0%—13 dic 2022
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2022-44690Alta (8.8)82%—13 dic 2022
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2022-41122Media (6.5)1.6%—9 nov 2022
Microsoft SharePoint Server Spoofing Vulnerability
CVE-2022-41062Alta (8.8)1.6%—9 nov 2022
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2022-41038Alta (8.8)2.9%—11 oct 2022
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2022-41037Alta (8.8)1.7%—11 oct 2022
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2022-41036Alta (8.8)1.7%—11 oct 2022
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2022-38053Alta (8.8)76%—11 oct 2022
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2022-38009Alta (8.8)2.1%—13 sept 2022
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2022-38008Alta (8.8)2.0%—13 sept 2022
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2022-37961Alta (8.8)51%—13 sept 2022
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2022-35823Alta (8.8)54%—13 sept 2022
Microsoft SharePoint Remote Code Execution Vulnerability
CVE-2022-30158Alta (8.8)3.4%—15 jun 2022
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2022-29108Alta (8.8)11%—10 may 2022
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2022-24472Media (5.7)2.0%—15 abr 2022
Microsoft SharePoint Server Spoofing Vulnerability
CVE-2022-22005Alta (8.8)16%—9 feb 2022
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2022-21987Alta (8)2.0%—9 feb 2022
Microsoft SharePoint Server Spoofing Vulnerability
CVE-2022-21968Media (4.3)2.1%—9 feb 2022
Microsoft SharePoint Server Security Feature Bypass Vulnerability
CVE-2022-21837Alta (8.8)3.0%—11 ene 2022
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2021-43242Media (5.7)1.2%—15 dic 2021
Microsoft SharePoint Server Spoofing Vulnerability
CVE-2021-42309Alta (8.8)2.7%—15 dic 2021
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2021-42294Alta (7.2)2.2%—15 dic 2021
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2021-41344Alta (8.8)6.5%—13 oct 2021
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2021-40487Alta (8.8)48%—13 oct 2021
Microsoft SharePoint Server Remote Code Execution Vulnerability

🎯 Cómo se explota (técnicas ATT&CK)

  1. T1190 Exploit Public-Facing Application2
  2. T1059 Command and Scripting Interpreter1
  3. T1059.003 Windows Command Shell1

Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.

Otros productos de Microsoft