Microsoft SharePoint Designer vulnerabilities

11 CVEs affecting Microsoft SharePoint Designer, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-16946, published 2020-10-16.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2016-0136, published 2016-04-12. High severity, CVSS 7.8. EPSS: 20.7% chance of exploitation in the next 30 days. Microsoft Excel 2007 SP3, Excel 2010 SP2, Office Compatibility Pack SP3, Excel Services on SharePoint Server 2007 SP3, and Excel Services on SharePoint Server 2010 SP2 allow remote attackers to…
CVE-2016-3365, published 2016-09-14. High severity, CVSS 7.8. EPSS: 19.9% chance of exploitation in the next 30 days. Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, Excel Viewer, Excel Services on SharePoint Server 2007 SP3, Excel Services on…
CVE-2016-3358, published 2016-09-14. High severity, CVSS 7.8. EPSS: 18.4% chance of exploitation in the next 30 days. Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel 2016 for Mac, Office Compatibility Pack SP3, Excel Viewer, Excel Services on SharePoint Server 2007 SP3,…
CVE-2016-3362, published 2016-09-14. High severity, CVSS 7.8. EPSS: 17.5% chance of exploitation in the next 30 days. Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, Excel Viewer, Excel Services on SharePoint Server 2007 SP3, Excel Services on…
CVE-2008-3068, published 2008-07-07. High severity, CVSS 7.5. EPSS: 17.4% chance of exploitation in the next 30 days. Microsoft Crypto API 5.131.2600.2180 through 6.0, as used in Outlook, Windows Live Mail, and Office 2007, performs Certificate Revocation List (CRL) checks by using an arbitrary URL from a…
CVE-2016-3360, published 2016-09-14. High severity, CVSS 7.8. EPSS: 17.2% chance of exploitation in the next 30 days. Microsoft PowerPoint 2007 SP3, PowerPoint 2010 SP2, PowerPoint 2013 SP1, PowerPoint 2013 RT SP1, PowerPoint 2016 for Mac, Office Compatibility Pack SP3, PowerPoint Viewer, SharePoint Server 2013 SP1,…
CVE-2015-2376, published 2015-07-14. High severity, CVSS 9.3. EPSS: 15.7% chance of exploitation in the next 30 days. Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Office for Mac 2011, Excel Viewer 2007 SP3, Office Compatibility Pack SP3, Excel Services on SharePoint Server 2007 SP3,…
CVE-2016-0054, published 2016-02-10. High severity, CVSS 7.8. EPSS: 15.7% chance of exploitation in the next 30 days. Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, Office Compatibility Pack SP3, Excel Viewer, Excel Services on…
CVE-2014-0251, published 2014-05-14. High severity, CVSS 9.0. EPSS: 14.2% chance of exploitation in the next 30 days. Microsoft Windows SharePoint Services 3.0 SP3; SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013 Gold and SP1; SharePoint Foundation 2010 SP1 and SP2 and 2013 Gold and SP1; Project Server 2010…
CVE-2020-1573, published 2020-08-17. Medium severity, CVSS 5.5. EPSS: 1.9% chance of exploitation in the next 30 days. A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated…

Latest

CVE-2020-16946, published 2020-10-16. High severity, CVSS 8.7. EPSS: 1.6% chance of exploitation in the next 30 days. <p>A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated…