Microsoft Business Productivity Servers vulnerabilities

5 CVEs affecting Microsoft Business Productivity Servers, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-27076, published 2021-03-11.

More from Microsoft.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2017-0243, published 2017-07-11. High severity, CVSS 7.8. EPSS: 21.5% chance of exploitation in the next 30 days. Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Microsoft Office Remote Code Execution Vulnerability". This CVE ID is unique from…
• CVE-2021-27076, published 2021-03-11. High severity, CVSS 8.8. EPSS: 15.2% chance of exploitation in the next 30 days. Microsoft SharePoint Server Remote Code Execution Vulnerability
• CVE-2020-0931, published 2020-04-15. High severity, CVSS 8.8. EPSS: 10.7% chance of exploitation in the next 30 days. A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution…
• CVE-2019-0558, published 2019-01-08. Medium severity, CVSS 5.4. EPSS: 2% chance of exploitation in the next 30 days. A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft Office…
• CVE-2020-0795, published 2020-03-12. Medium severity, CVSS 5.4. EPSS: 1.5% chance of exploitation in the next 30 days. This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server.An authenticated attacker could exploit this vulnerability…