Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:sharepoint_foundation:2010:*:*:*:*:*:*:*

part: a version: 2010 update: *

VendorMicrosoft (67206627-3ef6-5870-9d98-26a9f2e7065c)
ProductSharepoint Foundation (367678c3-801a-5de5-84aa-05dc9002b302)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-1863 vulnerable 2026-06-08 05:00:51.188344 Details available
Cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint Server 2007 SP2 and SP3 Windows SharePoint Services 3.0 SP2, and SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via crafted JavaScript elements in a URL, aka "SharePoint Reflected List Parameter Vulnerability."
Published: 2012-07-10T21:00:00.000Z
Updated: 2024-08-06T19:08:38.728Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1861 vulnerable 2026-06-08 05:00:51.182935 Details available
Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 Gold and SP1, SharePoint Foundation 2010 Gold and SP1, and Office Web Apps 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via crafted JavaScript elements in a URL, aka "SharePoint Script in Username Vulnerability."
Published: 2012-07-10T21:00:00.000Z
Updated: 2024-08-06T19:08:38.567Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1859 vulnerable 2026-06-08 05:00:51.179059 Details available
Cross-site scripting (XSS) vulnerability in scriptresx.ashx in Microsoft SharePoint Server 2010 Gold and SP1, SharePoint Foundation 2010 Gold and SP1, and Office Web Apps 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via crafted JavaScript elements in a URL, aka "XSS scriptresx.ashx Vulnerability."
Published: 2012-07-10T21:00:00.000Z
Updated: 2024-08-06T19:08:38.735Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0145 vulnerable 2026-06-08 05:00:39.621560 Details available
Cross-site scripting (XSS) vulnerability in wizardlist.aspx in Microsoft Office SharePoint Server 2010 Gold and SP1 and SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via JavaScript sequences in a URL, aka "XSS in wizardlist.aspx Vulnerability."
Published: 2012-02-14T22:00:00.000Z
Updated: 2024-08-06T18:16:18.949Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0144 vulnerable 2026-06-08 05:00:39.620139 Details available
Cross-site scripting (XSS) vulnerability in themeweb.aspx in Microsoft Office SharePoint Server 2010 Gold and SP1 and SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via JavaScript sequences in a URL, aka "XSS in themeweb.aspx Vulnerability."
Published: 2012-02-14T22:00:00.000Z
Updated: 2024-08-06T18:16:18.957Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0017 vulnerable 2026-06-08 04:59:35.581508 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1893 vulnerable 2026-06-08 04:58:02.562403 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1892 vulnerable 2026-06-08 04:58:02.556590 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1891 vulnerable 2026-06-08 04:58:02.547515 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1890 vulnerable 2026-06-08 04:58:02.546521 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0653 vulnerable 2026-06-08 04:56:38.496909 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3324 vulnerable 2026-06-08 04:55:14.167501 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.