Sharepoint Services
Vendor:
First CVE: Jan 20, 2004 · Active for 22 years
19
Total CVEs
More Total CVEs than 93% of tracked products
2.4
Avg CVEs / Year
Higher CVE frequency than 74% of tracked products
5.7
Avg CVSS
Higher Avg CVSS than 17% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Sharepoint Services over time
Volume of CVEsAvg CVSS Base Score
First CVE
Jan 20, 2004
22 years ago
Most Recent CVE
Mar 11, 2015
4,153 days ago
CVE Severity & Scoring
Sharepoint Services19 CVEs
74%
26%
All CVEs352,231 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local0 (0.0%)
Network1 (5.3%)
Unknown18 (94.7%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low1 (5.3%)
High0 (0.0%)
Unknown18 (94.7%)
User Interaction
None0 (0.0%)
Unknown18 (94.7%)
Required1 (5.3%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None1 (5.3%)
Unknown18 (94.7%)
Top CVEs
Signals from CVEs in this product scope (19 CVEs).
19 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2013-0081MEDIUM Microsoft SharePoint Portal Server 2003 SP3 and SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013 do not properly process unassigned workflows, which allows remote attackers t | Sep 11, 2013 | 5.0 | 55 | NO | NO |
CVE-2011-1892MEDIUM Microsoft Office Groove 2007 SP2, SharePoint Workspace 2010 Gold and SP1, Office Forms Server 2007 SP2, Office SharePoint Server 2007 SP2, Office SharePoint Server 2010 Gold and SP | Sep 15, 2011 | 4.0 | 44 | NO | YES |
CVE-2010-0817MEDIUM Cross-site scripting (XSS) vulnerability in _layouts/help.aspx in Microsoft SharePoint Server 2007 12.0.0.6421 and possibly earlier, and SharePoint Services 3.0 SP1 and SP2, versio | Apr 29, 2010 | 4.3 | 41 | NO | YES |
CVE-2007-2581MEDIUM Multiple cross-site scripting (XSS) vulnerabilities in Microsoft Windows SharePoint Services 3.0 for Windows Server 2003 and Office SharePoint Server 2007 allow remote attackers to | May 9, 2007 | 4.3 | 41 | NO | YES |
CVE-2013-1330HIGH The default configuration of Microsoft SharePoint Portal Server 2003 SP3, SharePoint Server 2007 SP3 and 2010 SP1 and SP2, and Office Web Apps 2010 does not set the EnableViewState | Sep 11, 2013 | 10.0 | 38 | NO | NO |
CVE-2013-1315HIGH Microsoft SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013; Office Web Apps 2010; Excel 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Office for Mac 2011; Excel Vi | Sep 11, 2013 | 9.3 | 38 | NO | NO |
CVE-2010-3324MEDIUM The toStaticHTML function in Microsoft Internet Explorer 8, and the SafeHTML function in Microsoft Windows SharePoint Services 3.0 SP2, SharePoint Foundation 2010, Office SharePoin | Sep 17, 2010 | 4.3 | 34 | NO | YES |
CVE-2013-3847HIGH Microsoft Word Automation Services in SharePoint Server 2010 SP1, Word Web App 2010 SP1 in Office Web Apps 2010, Word 2003 SP3, Word 2007 SP3, Word 2010 SP1, Office Compatibility P | Sep 11, 2013 | 9.3 | 32 | NO | NO |
CVE-2015-0085HIGH Use-after-free vulnerability in Microsoft Office 2007 SP3, Excel 2007 SP3, PowerPoint 2007 SP3, Word 2007 SP3, Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Word 2010 SP2, | Mar 11, 2015 | 9.3 | 30 | NO | NO |
CVE-2012-2520MEDIUM Cross-site scripting (XSS) vulnerability in Microsoft InfoPath 2007 SP2 and SP3 and 2010 SP1, Communicator 2007 R2, Lync 2010 and 2010 Attendee, SharePoint Server 2007 SP2 and SP3 | Oct 9, 2012 | 4.3 | 30 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (19 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
5 CVEs
26.3% of CVEs· 90th percentile
Social Chatter
Signals from CVEs in this product scope (19 CVEs).
Media Mentions
Signals from CVEs in this product scope (19 CVEs).
Top CNAs Publishing CVEs For Sharepoint Services
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 3.0 | 18 | 5.1 | 24.9% | 0 | 5 |
| 2.0 | 6 | 7.3 | 29.5% | 0 | 0 |