Known vulnerabilities in Microsoft SharePoint Enterprise Server - page 7

Vendor: Microsoft
Software: Microsoft SharePoint Enterprise Server
Software CPE: cpe:2.3:a:microsoft:microsoft_sharepoint_enterprise_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 171
Public exploits: 4
Known exploited (KEV): 6
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft SharePoint Enterprise Server Microsoft SharePoint Enterprise Server is affected by 171 known vulnerabilities: 38 high, 92 medium, 41 low Critical High Medium Low

Vulnerabilities (171)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU93954 - Deserialization of Untrusted Data
CVE-2024-38024		 CWE-502 Low
No
No
 - 09.07.2024 SB2024070999
#VU93953 - Deserialization of Untrusted Data
CVE-2024-38023		 CWE-502 Low
No
No
 - 09.07.2024 SB2024070999
#VU93952 - Server-Side Request Forgery (SSRF)
CVE-2024-32987		 CWE-918 Medium
No
No
 - 09.07.2024 SB2024070999
#VU91698 - Untrusted Search Path
CVE-2024-30100		 CWE-426 High
No
No
 - 11.06.2024 SB20240611227
#VU89452 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-30043		 CWE-611 Medium
Available
No
 - 14.05.2024 SB2024051442
#VU89451 - Deserialization of Untrusted Data
CVE-2024-30044		 CWE-502 Medium
No
No
 - 14.05.2024 SB2024051442
#VU87360 - Improper input validation
CVE-2024-21426		 CWE-20 High
No
No
 - 12.03.2024 SB20240312307
#VU85177 - Improper input validation
CVE-2024-21318		 CWE-20 Medium
No
No
 - 09.01.2024 SB2024010937
#VU83068 - Improper input validation
CVE-2023-38177		 CWE-20 Low
No
No
 - 14.11.2023 SB2023111450
#VU80710 - Permissions, Privileges, and Access Controls
CVE-2023-36764		 CWE-264 Medium
No
No
 16.0.5413.1001 13.09.2023 SB2023091304
#VU80695 - Improper input validation
CVE-2023-36762		 CWE-20 High
No
No
 16.0.5413.1000, 16.0.5413.1001 13.09.2023 SB2023091301
#VU79178 - Exposure of sensitive information to an unauthorized actor
CVE-2023-36894		 CWE-200 Medium
No
No
 - 08.08.2023 SB2023080881
#VU78177 - Improper input validation
CVE-2023-33157		 CWE-20 Medium
No
No
 - 12.07.2023 SB2023071235
#VU78128 - Improper input validation
CVE-2023-33160		 CWE-20 Medium
No
No
 - 11.07.2023 SB2023071179
#VU78115 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2023-33159		 CWE-451 High
No
No
 - 11.07.2023 SB2023071179
#VU78113 - Improper input validation
CVE-2023-33134		 CWE-20 Medium
No
No
 - 11.07.2023 SB2023071179
#VU77272 - Improper input validation
CVE-2023-33129		 CWE-20 Medium
No
No
 - 14.06.2023 SB2023061401
#VU75909 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2023-24950		 CWE-451 Medium
No
No
 - 09.05.2023 SB20230509101
#VU75908 - Exposure of sensitive information to an unauthorized actor
CVE-2023-24954		 CWE-200 Medium
No
No
 - 09.05.2023 SB20230509101
#VU75907 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-24955		 CWE-94 High
Available
Exploited
 - 09.05.2023 SB20230509101


Showing elements 121 - 140 out of 171