Known vulnerabilities in Microsoft SharePoint Enterprise Server 2016 - page 3

Vendor: Microsoft
Software: Microsoft SharePoint Enterprise Server
Version: 2016
Software CPE: cpe:2.3:a:microsoft:microsoft_sharepoint_enterprise_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 111
Public exploits: 4
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Microsoft SharePoint Enterprise Server version 2016 Microsoft SharePoint Enterprise Server 2016 is affected by 111 vulnerabilities: 33 high, 63 medium, 15 low Critical High Medium Low

Vulnerabilities (111)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU109082 - Deserialization of Untrusted Data
CVE-2025-30384		 CWE-502 High
No
No
 - 13.05.2025 SB2025051391
#VU109081 - Improper Privilege Management
CVE-2025-29976		 CWE-269 Low
No
No
 - 13.05.2025 SB2025051391
#VU109080 - Deserialization of Untrusted Data
CVE-2025-30378		 CWE-502 High
No
No
 - 13.05.2025 SB2025051391
#VU107288 - Deserialization of Untrusted Data
CVE-2025-29793		 CWE-502 Low
No
No
 - 09.04.2025 SB2025040955
#VU107287 - Improper Authorization
CVE-2025-29794		 CWE-285 Medium
No
No
 - 09.04.2025 SB2025040955
#VU107266 - Untrusted Pointer Dereference
CVE-2025-27747		 CWE-822 High
No
No
 - 09.04.2025 SB2025040924
#VU103790 - Improper Authorization
CVE-2025-21400		 CWE-285 Medium
No
No
 - 11.02.2025 SB2025021196
#VU102664 - Improper Authorization
CVE-2025-21348		 CWE-285 Low
No
No
 - 14.01.2025 SB2025011454
#VU102662 - Improper input validation
CVE-2025-21344		 CWE-20 High
No
No
 - 14.01.2025 SB2025011454
#VU102660 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-21393		 CWE-79 Low
No
No
 - 14.01.2025 SB2025011454
#VU101593 - Out-of-bounds read
CVE-2024-49065		 CWE-125 Medium
No
No
 - 10.12.2024 SB20241210110
#VU101442 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-49062		 CWE-22 Medium
No
No
 - 10.12.2024 SB2024121087
#VU101441 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-49064		 CWE-611 Medium
No
No
 - 10.12.2024 SB2024121087
#VU101440 - Deserialization of Untrusted Data
CVE-2024-49070		 CWE-502 High
No
No
 - 10.12.2024 SB2024121087
#VU101439 - Improper Access Control
CVE-2024-49068		 CWE-284 High
No
No
 - 10.12.2024 SB2024121087
#VU98240 - Improper Access Control
CVE-2024-43503		 CWE-284 Low
No
No
 - 09.10.2024 SB2024100907
#VU97030 - Command injection
CVE-2024-38227		 CWE-77 Low
No
No
 - 10.09.2024 SB20240910102
#VU97029 - Deserialization of Untrusted Data
CVE-2024-38018		 CWE-502 Medium
No
No
 - 10.09.2024 SB20240910102
#VU97028 - Deserialization of Untrusted Data
CVE-2024-43464		 CWE-502 Low
No
No
 - 10.09.2024 SB20240910102
#VU97026 - Deserialization of Untrusted Data
CVE-2024-43466		 CWE-502 Medium
No
No
 - 10.09.2024 SB20240910102


Showing elements 41 - 60 out of 111