Microsoft SharePoint Server Client Components SDK vulnerabilities

2 CVEs affecting Microsoft SharePoint Server Client Components SDK, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-1754, published 2014-05-14.

More from Microsoft.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2014-0251, published 2014-05-14. High severity, CVSS 9.0. EPSS: 14.2% chance of exploitation in the next 30 days. Microsoft Windows SharePoint Services 3.0 SP3; SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013 Gold and SP1; SharePoint Foundation 2010 SP1 and SP2 and 2013 Gold and SP1; Project Server 2010…
• CVE-2014-1754, published 2014-05-14. Medium severity, CVSS 4.3. EPSS: 11.1% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2013 Gold and SP1, SharePoint Foundation 2013 Gold and SP1, Office Web Apps Server 2013 Gold and SP1, and SharePoint Server…