Known vulnerabilities in Microsoft SharePoint Enterprise Server - page 3

Vendor: Microsoft
Software: Microsoft SharePoint Enterprise Server
Software CPE: cpe:2.3:a:microsoft:microsoft_sharepoint_enterprise_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 171
Public exploits: 4
Known exploited (KEV): 6
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft SharePoint Enterprise Server Microsoft SharePoint Enterprise Server is affected by 171 known vulnerabilities: 38 high, 92 medium, 41 low Critical High Medium Low

Vulnerabilities (171)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU134148 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-33113		 CWE-79 Low
No
No
 16.0.5556.1005 09.06.2026 SB2026060973
#VU134146 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-47641		 CWE-79 Low
No
No
 16.0.5556.1005 09.06.2026 SB2026060973
#VU134145 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-47639		 CWE-79 Low
No
No
 16.0.5556.1005 09.06.2026 SB2026060973
#VU134143 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-47638		 CWE-79 Low
No
No
 16.0.5556.1005 09.06.2026 SB2026060973
#VU134142 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-47637		 CWE-79 Low
No
No
 16.0.5556.1005 09.06.2026 SB2026060973
#VU134141 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-47636		 CWE-79 Low
No
No
 16.0.5556.1005 09.06.2026 SB2026060973
#VU134140 - Improper Authorization
CVE-2026-47298		 CWE-285 Medium
No
No
 16.0.5556.1005 09.06.2026 SB2026060973
#VU134122 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-45453		 CWE-79 Low
No
No
 16.0.5556.1005 09.06.2026 SB2026060973
#VU134121 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-45479		 CWE-79 Low
No
No
 16.0.5556.1005 09.06.2026 SB2026060973
#VU134120 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-45468		 CWE-79 Low
No
No
 16.0.5556.1005 09.06.2026 SB2026060973
#VU132363 - Deserialization of Untrusted Data
CVE-2026-45659		 CWE-502 High
No
Exploited
 16.0.5552.1002 27.05.2026 SB2026052737
#VU131348 - Untrusted Pointer Dereference
CVE-2026-40367		 CWE-822 High
No
No
 16.0.5552.1002 13.05.2026 SB2026051382
#VU131345 - Deserialization of Untrusted Data
CVE-2026-40357		 CWE-502 Medium
No
No
 16.0.5552.1002 13.05.2026 SB2026051368
#VU131344 - Deserialization of Untrusted Data
CVE-2026-33112		 CWE-502 Medium
No
No
 16.0.5552.1002 13.05.2026 SB2026051368
#VU131343 - Deserialization of Untrusted Data
CVE-2026-33110		 CWE-502 Medium
No
No
 16.0.5552.1002 13.05.2026 SB2026051368
#VU131342 - Deserialization of Untrusted Data
CVE-2026-35439		 CWE-502 Medium
No
No
 16.0.5552.1002 13.05.2026 SB2026051368
#VU131341 - Deserialization of Untrusted Data
CVE-2026-40368		 CWE-502 Medium
No
No
 16.0.5552.1002 13.05.2026 SB2026051368
#VU131340 - Insufficient Granularity of Access Control
CVE-2026-40365		 CWE-1220 Medium
No
No
 16.0.5552.1002 13.05.2026 SB2026051368
#VU126065 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-20945		 CWE-79 Low
No
No
 16.0.5548.1003 14.04.2026 SB20260414165
#VU123867 - Untrusted Pointer Dereference
CVE-2026-26113		 CWE-822 High
No
No
 16.0.5543.1000 11.03.2026 SB2026031116


Showing elements 41 - 60 out of 171