Known vulnerabilities in Microsoft SharePoint Enterprise Server 2013 Service Pack 1

Vendor: Microsoft
Software: Microsoft SharePoint Enterprise Server
Version: 2013 Service Pack 1
Software CPE: cpe:2.3:a:microsoft:microsoft_sharepoint_enterprise_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 25
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Microsoft SharePoint Enterprise Server version 2013 Service Pack 1 Microsoft SharePoint Enterprise Server 2013 Service Pack 1 is affected by 25 vulnerabilities: 1 high, 23 medium, 1 low Critical High Medium Low

Vulnerabilities (25)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU74976 - Server-Side Request Forgery (SSRF)
CVE-2023-28288		 CWE-918 Medium
Public exploit available
No
 - 11.04.2023 SB2023041195
#VU73599 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2023-23395		 CWE-451 Low
No
No
 - 14.03.2023 SB2023031458
#VU70958 - Improper input validation
CVE-2023-21742		 CWE-20 Medium
Public exploit available
No
 - 10.01.2023 SB2023011051
#VU70957 - Improper input validation
CVE-2023-21744		 CWE-20 Medium
No
No
 - 10.01.2023 SB2023011051
#VU70219 - Improper input validation
CVE-2022-44693		 CWE-20 Medium
No
No
 - 13.12.2022 SB2022121381
#VU70218 - Improper input validation
CVE-2022-44690		 CWE-20 Medium
No
No
 - 13.12.2022 SB2022121381
#VU69087 - Exposure of sensitive information to an unauthorized actor
CVE-2022-41060		 CWE-200 Medium
No
No
 - 08.11.2022 SB2022110818
#VU69086 - Exposure of sensitive information to an unauthorized actor
CVE-2022-41103		 CWE-200 Medium
No
No
 - 08.11.2022 SB2022110818
#VU69085 - Improper input validation
CVE-2022-41061		 CWE-20 High
No
No
 - 08.11.2022 SB2022110818
#VU69069 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2022-41122		 CWE-451 Medium
No
No
 - 08.11.2022 SB2022110807
#VU69068 - Improper input validation
CVE-2022-41062		 CWE-20 Medium
No
No
 - 08.11.2022 SB2022110807
#VU68220 - Improper input validation
CVE-2022-41037		 CWE-20 Medium
No
No
 - 12.10.2022 SB2022101213
#VU68219 - Improper input validation
CVE-2022-41036		 CWE-20 Medium
No
No
 - 12.10.2022 SB2022101213
#VU68218 - Improper input validation
CVE-2022-41038		 CWE-20 Medium
No
No
 - 12.10.2022 SB2022101213
#VU68217 - Improper input validation
CVE-2022-38053		 CWE-20 Medium
No
No
 - 12.10.2022 SB2022101213
#VU67284 - Improper input validation
CVE-2022-37961		 CWE-20 Medium
No
No
 - 13.09.2022 SB2022091379
#VU67283 - Improper input validation
CVE-2022-38009		 CWE-20 Medium
No
No
 - 13.09.2022 SB2022091379
#VU67282 - Improper input validation
CVE-2022-38008		 CWE-20 Medium
No
No
 - 13.09.2022 SB2022091379
#VU67281 - Deserialization of Untrusted Data
CVE-2022-35823		 CWE-502 Medium
No
No
 - 13.09.2022 SB2022091379
#VU64374 - Deserialization of Untrusted Data
CVE-2022-30157		 CWE-502 Medium
No
No
 - 14.06.2022 SB2022061461


Showing elements 1 - 20 out of 25