[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fWeFNKJd3KVVKT_vwhXLjSC3Z2T8gFWIpB0DOIDZuNQ8":3,"g5a-family:microsoft\u002Fsharepoint_foundation":114,"g5a-ex:microsoft\u002Fsharepoint_foundation@*":115},{"success":4,"data":5},true,{"product":6,"versions":23,"topVulnerabilitiesByEpss":26,"kevVulnerabilities":86,"seoMetadata":92,"meta":111},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":22},"microsoft","sharepoint_foundation",2,226,1,"2023-04-11",[14,19],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},"2010",90,0,false,{"version":20,"cve_count":21,"kev_count":11,"has_kev":4},"2013",191,"Sharepoint Foundation by Microsoft is a technology product with 2 tracked versions and 226 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[24,25],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},{"version":20,"cve_count":21,"kev_count":11,"has_kev":4},[27,35,40,47,51,59,65,70,75,79],{"cveId":28,"description":29,"publishedDate":30,"cvssScore":31,"cvssVersion":32,"severity":33,"isKev":4,"epssScore":34},"CVE-2019-0604","A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0594.","2019-03-05",9.8,"v3.1","Critical",0.99913,{"cveId":36,"description":37,"publishedDate":38,"cvssScore":31,"cvssVersion":32,"severity":33,"isKev":18,"epssScore":39},"CVE-2023-21716","Microsoft Word Remote Code Execution Vulnerability","2023-02-14",0.848,{"cveId":41,"description":42,"publishedDate":43,"cvssScore":44,"cvssVersion":32,"severity":45,"isKev":18,"epssScore":46},"CVE-2022-44690","Microsoft SharePoint Server Remote Code Execution Vulnerability","2022-12-13",8.8,"High",0.82081,{"cveId":48,"description":42,"publishedDate":49,"cvssScore":44,"cvssVersion":32,"severity":45,"isKev":18,"epssScore":50},"CVE-2022-38053","2022-10-11",0.76397,{"cveId":52,"description":53,"publishedDate":54,"cvssScore":55,"cvssVersion":56,"severity":57,"isKev":18,"epssScore":58},"CVE-2013-0081","Microsoft SharePoint Portal Server 2003 SP3 and SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013 do not properly process unassigned workflows, which allows remote attackers to cause a denial of service (W3WP process hang) via a crafted URL, aka \"SharePoint Denial of Service Vulnerability.\"","2013-09-11",5,"v2","Medium",0.76173,{"cveId":60,"description":61,"publishedDate":62,"cvssScore":63,"cvssVersion":32,"severity":45,"isKev":18,"epssScore":64},"CVE-2020-16952","\u003Cp>A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SharePoint application pool and the SharePoint server farm account.\u003C\u002Fp>\n\u003Cp>Exploitation of this vulnerability requires that a user uploads a specially crafted SharePoint application package to an affected version of SharePoint.\u003C\u002Fp>\n\u003Cp>The security update addresses the vulnerability by correcting how SharePoint checks the source markup of application packages.\u003C\u002Fp>\n","2020-10-16",8.6,0.71095,{"cveId":66,"description":67,"publishedDate":68,"cvssScore":44,"cvssVersion":32,"severity":45,"isKev":18,"epssScore":69},"CVE-2020-1181","A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net web controls, aka 'Microsoft SharePoint Server Remote Code Execution Vulnerability'.","2020-06-09",0.69303,{"cveId":71,"description":72,"publishedDate":54,"cvssScore":73,"cvssVersion":56,"severity":57,"isKev":18,"epssScore":74},"CVE-2013-3180","Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 SP1 and SP2 and 2013 allows remote attackers to inject arbitrary web script or HTML via a crafted POST request, aka \"POST XSS Vulnerability.\"",4.3,0.65573,{"cveId":76,"description":42,"publishedDate":77,"cvssScore":44,"cvssVersion":32,"severity":45,"isKev":18,"epssScore":78},"CVE-2023-21742","2023-01-10",0.55786,{"cveId":80,"description":81,"publishedDate":82,"cvssScore":83,"cvssVersion":84,"severity":45,"isKev":18,"epssScore":85},"CVE-2016-3357","Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office 2016, Word for Mac 2011, Word 2016 for Mac, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2, SharePoint Server 2013 SP1, Excel Automation Services on SharePoint Server 2013 SP1, Word Automation Services on SharePoint Server 2013 SP1, Office Web Apps 2010 SP2, and Office Web Apps Server 2013 SP1 allow remote attackers to execute arbitrary code via a crafted document, aka \"Microsoft Office Memory Corruption Vulnerability.\"","2016-09-14",7.8,"v3.0",0.54809,[87],{"cveId":28,"description":29,"publishedDate":30,"cvssScore":31,"severity":33,"isKev":4,"epssScore":34,"cisaVulnName":88,"cisaDateAdded":89,"cisaShortDescription":90,"cisaRequiredAction":91},"Microsoft SharePoint Remote Code Execution Vulnerability","2021-11-03","Microsoft SharePoint fails to check the source markup of an application package. An attacker who successfully exploits the vulnerability could run remote code in the context of the SharePoint application pool and the SharePoint server farm account.","Apply updates per vendor instructions.",{"title":93,"metaDescription":94,"keywords":95,"structuredData":96},"Sharepoint Foundation by Microsoft - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Sharepoint Foundation by Microsoft covering 2 versions with 226 tracked vulnerabilities including 1 critical and 0 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Sharepoint Foundation vulnerabilities, Sharepoint Foundation security, Sharepoint Foundation CVE, Microsoft Sharepoint Foundation, Sharepoint Foundation threat intelligence, Microsoft security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Sharepoint Foundation KEV, Sharepoint Foundation exploited vulnerabilities",{"@context":97,"@type":98,"name":99,"description":94,"url":100,"manufacturer":101,"applicationCategory":105,"softwareVersion":106,"mainEntity":107},"https:\u002F\u002Fschema.org","SoftwareApplication","Sharepoint Foundation","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fmicrosoft\u002Fsharepoint_foundation",{"@type":102,"name":103,"url":104},"Organization","Microsoft","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fmicrosoft","Security Software","2 versions tracked",{"@type":108,"name":109,"description":110,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Sharepoint Foundation Security Vulnerabilities","Security vulnerabilities affecting Sharepoint Foundation by Microsoft",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":112,"apiVersion":113},"2026-10-18T15:01:03.890Z","3.0",[],{"rows":116,"total":11,"capped":18,"failed":17},[117],{"cveId":28,"name":88,"severity":33,"cvss":31,"added":89,"epss":34,"published":118,"ranges":119,"checked":4,"hits":121,"covers":18},"2019-03-05T23:29:00.757",[120],"2013-sp1",[]]