Sharepoint Foundation
Vendor:
First CVE: Sep 17, 2010 · Active for 15 years
226
Total CVEs
More Total CVEs than 100% of tracked products
16.1
Avg CVEs / Year
Higher CVE frequency than 98% of tracked products
6.9
Avg CVSS
Higher Avg CVSS than 39% of tracked products
0.4%
KEV Rate
Higher KEV Rate than 96% of tracked products
Trends Over Time
The number and severity of CVEs published that impact Sharepoint Foundation over time
Volume of CVEsAvg CVSS Base Score
First CVE
Sep 17, 2010
15 years ago
Most Recent CVE
Apr 11, 2023
1,200 days ago
CVE Severity & Scoring
Sharepoint Foundation226 CVEs
49%
46%
All CVEs352,294 CVEs
45%
40%
11%
LowMediumHighCritical
Attack Vector
Local11 (4.9%)
Network176 (77.9%)
Unknown38 (16.8%)
Physical0 (0.0%)
Adjacent Network1 (0.4%)
Attack Complexity
Low185 (81.9%)
High3 (1.3%)
Unknown38 (16.8%)
User Interaction
None97 (42.9%)
Unknown38 (16.8%)
Required91 (40.3%)
Privileges Required
Low142 (62.8%)
High4 (1.8%)
None42 (18.6%)
Unknown38 (16.8%)
Top CVEs
Signals from CVEs in this product scope (226 CVEs).
226 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2019-0604CRITICAL A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote | Mar 5, 2019 | 9.8 | 98 | YES | YES |
CVE-2020-16952HIGH <p>A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An attacker who successfully e | Oct 16, 2020 | 8.6 | 80 | NO | YES |
CVE-2023-21716CRITICAL Microsoft Word Remote Code Execution Vulnerability | Feb 14, 2023 | 9.8 | 77 | NO | NO |
CVE-2022-44690HIGH Microsoft SharePoint Server Remote Code Execution Vulnerability | Dec 13, 2022 | 8.8 | 73 | NO | NO |
CVE-2022-38053HIGH Microsoft SharePoint Server Remote Code Execution Vulnerability | Oct 11, 2022 | 8.8 | 71 | NO | NO |
CVE-2016-3357HIGH Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office 2016, Word for Mac 2011, Word 2016 for Mac, Word Viewer, Word Automation Services on SharePo | Sep 14, 2016 | 7.8 | 66 | NO | YES |
CVE-2020-1181HIGH A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net web controls, aka 'Microsoft SharePoint Ser | Jun 9, 2020 | 8.8 | 61 | NO | NO |
CVE-2022-35823HIGH Microsoft SharePoint Remote Code Execution Vulnerability | Sep 13, 2022 | 8.8 | 58 | NO | NO |
CVE-2022-37961HIGH Microsoft SharePoint Server Remote Code Execution Vulnerability | Sep 13, 2022 | 8.8 | 56 | NO | NO |
CVE-2021-31181HIGH Microsoft SharePoint Remote Code Execution Vulnerability | May 11, 2021 | 8.8 | 55 | NO | YES |
Exploit Exposure
Signals from CVEs in this product scope (226 CVEs).
CISA KEV
1 CVE
0.4% of CVEs· 96th percentile
Metasploit
2 CVEs
0.9% of CVEs· 96th percentile
Nuclei
2 CVEs
0.9% of CVEs· 96th percentile
ExploitDB
8 CVEs
3.5% of CVEs· 88th percentile
Social Chatter
Signals from CVEs in this product scope (226 CVEs).
Media Mentions
Signals from CVEs in this product scope (226 CVEs).
Top CNAs Publishing CVEs For Sharepoint Foundation
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 2013 | 191 | 7.0 | 8.8% | 1 | 7 |
| 2010 | 90 | 6.5 | 14.1% | 0 | 4 |