Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:sharepoint_foundation:2010:sp1:*:*:*:*:*:*

part: a version: 2010 update: sp1

VendorMicrosoft (67206627-3ef6-5870-9d98-26a9f2e7065c)
ProductSharepoint Foundation (367678c3-801a-5de5-84aa-05dc9002b302)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-0251 vulnerable 2026-06-08 05:05:12.472561 Details available
Microsoft Windows SharePoint Services 3.0 SP3; SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013 Gold and SP1; SharePoint Foundation 2010 SP1 and SP2 and 2013 Gold and SP1; Project Server 2010 SP1 and SP2 and 2013 Gold and SP1; Web Applications 2010 SP1 and SP2; Office Web Apps Server 2013 Gold and SP1; SharePoint Server 2013 Client Components SDK; and SharePoint Designer 2007 SP3, 2010 SP1 and SP2, and 2013 Gold and SP1 allow remote authenticated users to execute arbitrary code via crafted page content, aka "SharePoint Page Content Vulnerability."
Published: 2014-05-14T10:00:00.000Z
Updated: 2024-08-06T09:05:39.382Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3847 vulnerable 2026-06-08 05:04:33.016066 Details available
Microsoft Word Automation Services in SharePoint Server 2010 SP1, Word Web App 2010 SP1 in Office Web Apps 2010, Word 2003 SP3, Word 2007 SP3, Word 2010 SP1, Office Compatibility Pack SP3, and Word Viewer allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Word Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3848, CVE-2013-3849, and CVE-2013-3858.
Published: 2013-09-11T10:00:00.000Z
Updated: 2024-08-06T16:22:01.444Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3180 vulnerable 2026-06-08 05:04:30.293411 Details available
Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 SP1 and SP2 and 2013 allows remote attackers to inject arbitrary web script or HTML via a crafted POST request, aka "POST XSS Vulnerability."
Published: 2013-09-11T10:00:00.000Z
Updated: 2024-08-06T16:00:10.158Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3179 vulnerable 2026-06-08 05:04:30.290287 Details available
Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013 allows remote attackers to inject arbitrary web script or HTML via a crafted request, aka "SharePoint XSS Vulnerability."
Published: 2013-09-11T10:00:00.000Z
Updated: 2024-08-06T16:00:10.105Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1330 vulnerable 2026-06-08 05:03:53.377613 Details available
The default configuration of Microsoft SharePoint Portal Server 2003 SP3, SharePoint Server 2007 SP3 and 2010 SP1 and SP2, and Office Web Apps 2010 does not set the EnableViewStateMac attribute, which allows remote attackers to execute arbitrary code by leveraging an unassigned workflow, aka "MAC Disabled Vulnerability."
Published: 2013-09-11T10:00:00.000Z
Updated: 2024-08-06T14:57:05.091Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1315 vulnerable 2026-06-08 05:03:53.358060 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1289 vulnerable 2026-06-08 05:03:53.312656 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0086 vulnerable 2026-06-08 05:03:01.722846 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0085 vulnerable 2026-06-08 05:03:01.722555 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0084 vulnerable 2026-06-08 05:03:01.722248 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0083 vulnerable 2026-06-08 05:03:01.721933 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0081 vulnerable 2026-06-08 05:03:01.715780 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0080 vulnerable 2026-06-08 05:03:01.714797 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2520 vulnerable 2026-06-08 05:02:04.745379 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1863 vulnerable 2026-06-08 05:00:51.188368 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1861 vulnerable 2026-06-08 05:00:51.182954 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1859 vulnerable 2026-06-08 05:00:51.179085 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0145 vulnerable 2026-06-08 05:00:39.621581 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0144 vulnerable 2026-06-08 05:00:39.620799 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0017 vulnerable 2026-06-08 04:59:35.582065 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1891 vulnerable 2026-06-08 04:58:02.548479 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.