Known Vulnerabilities for Site Server by Microsoft
Listed below are 10 of the newest known vulnerabilities associated with "Site Server" by "Microsoft".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-62236 json | grav-plugin-login before 3.8.11 contains a cross-site request forgery (CSRF) vulnerability in the login.regenerate2FASecret f... | Not Provided | 2026-07-17 | 2026-07-17 |
| CVE-2026-61448 json | Parse Server is affected by a stored cross-site scripting (XSS) vulnerability in versions >= 9.0.0, < 9.10.0-alpha.2 and <= 8... | Not Provided | 2026-07-11 | 2026-07-13 |
| CVE-2026-60119 json | Hi.Events before 1.11.0 contains a cross-site scripting vulnerability that allows authenticated attackers with event creation... | Not Provided | 2026-07-14 | 2026-07-14 |
| CVE-2026-59102 json | Forgejo before 15.0.3 contains a stored cross-site scripting vulnerability that allows authenticated attackers to execute arb... | Not Provided | 2026-07-02 | 2026-07-06 |
| CVE-2026-58404 json | Hugo is a static site generator. From v0.162.0 through v0.163.0, the default security.http.urls policy denies requests to loo... | Not Provided | 2026-07-06 | 2026-07-07 |
| CVE-2026-58191 json | Appium is a cross-platform automation framework for all kinds of apps, built on top of the W3C WebDriver protocol. Prior to 1... | Not Provided | 2026-07-08 | 2026-07-09 |
| CVE-2026-58143 json | Cotonti Siena 0.9.26 and earlier contains a cross-site request forgery vulnerability that allows unauthenticated attackers to... | Not Provided | 2026-07-09 | 2026-07-14 |
| CVE-2026-56446 json | MISP allowed a site administrator to configure an arbitrary filesystem path for the NDJSON error log used by JsonLogTool. Bec... | Not Provided | 2026-06-22 | 2026-06-23 |
| CVE-2026-55778 json | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.9.1-alpha.... | Not Provided | 2026-07-08 | 2026-07-09 |
| CVE-2026-55659 json | Grist is spreadsheet software using Python as its formula language. Prior to 1.7.15, several server-rendered Grist pages embe... | Not Provided | 2026-07-10 | 2026-07-13 |