microsoft project server
productUScpe:2.3:a:microsoft:project_server:*:*:*:*:*:*:*:*
A product tracked in the threat graph; the vulnerabilities below are known to affect it.
0
KEV-listed
0
critical
by severity
0critical15high9medium0low
updated 2026-10-28
01
vulnerabilities (24)
Related CVEs.
| ID | severity | exploitable |
|---|---|---|
| CVE-2018-8284US | high8.1 | Exploit |
| CVE-2009-0102US | high9.3 | — |
| CVE-2006-6617US | medium6.5 | — |
| CVE-2015-2503US | high9.3 | — |
| CVE-2017-0281US | high7.8 | — |
| CVE-2014-0251US | high9.0 | — |
| CVE-2015-1640US | medium4.3 | — |
| CVE-2018-0944US | high8.8 | — |
| CVE-2018-0916US | high8.8 | — |
| CVE-2018-0915US | high8.8 | — |
| CVE-2018-0914US | high8.8 | — |
| CVE-2018-0913US | high8.8 | — |
| CVE-2018-0912US | high8.8 | — |
| CVE-2018-0911US | high8.8 | — |
| CVE-2018-0910US | high8.8 | — |
| CVE-2018-0909US | high8.8 | — |
| CVE-2017-8551US | medium6.1 | — |
| CVE-2018-8156US | medium5.4 | — |
| CVE-2018-8254US | medium5.4 | — |
| CVE-2017-11876US | high8.8 | — |
| CVE-2019-1036US | medium5.4 | — |
| CVE-2019-1033US | medium5.4 | — |
| CVE-2019-1031US | medium5.4 | — |
| CVE-2020-0954US | medium5.4 | — |
02
weaknesses (8)
The flaw types (CWEs) most of these CVEs share.
- CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')17 CVEs
- CWE-94Improper Control of Generation of Code ('Code Injection')2 CVEs
- CWE-19CWE-191 CVEs
- CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
- CWE-264CWE-2641 CVEs
- CWE-352Cross-Site Request Forgery (CSRF)1 CVEs
- CWE-399CWE-3991 CVEs
- CWE-532Insertion of Sensitive Information into Log File1 CVEs
03
sources (1)
Which sources assert this record, and when.
- USNVD / CVE24 CVEs
scry
Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan