Known vulnerabilities in Microsoft SharePoint Server 2013

Vendor: Microsoft
Software: Microsoft SharePoint Server
Version: 2013
Software CPE: cpe:2.3:a:microsoft:microsoft_sharepoint_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 122
Public exploits: 4
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Microsoft SharePoint Server version 2013 Microsoft SharePoint Server 2013 is affected by 122 vulnerabilities: 2 critical, 36 high, 28 medium, 56 low Critical High Medium Low

Vulnerabilities (122)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU86051 - Permissions, Privileges, and Access Controls
CVE-2021-43876		 CWE-264 Medium
No
No
 - 04.02.2024 SB2021121736
#VU72229 - Improper Access Control
CVE-2023-21717		 CWE-284 Medium
No
No
 - 15.02.2023 SB2023021512
#VU60420 - Exposure of sensitive information to an unauthorized actor
CVE-2022-22716		 CWE-200 Low
No
No
 - 08.02.2022 SB2022020841
#VU60410 - Deserialization of Untrusted Data
CVE-2022-22005		 CWE-502 Medium
No
No
 - 08.02.2022 SB2022020838
#VU59476 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-21840		 CWE-94 High
No
No
 - 11.01.2022 SB2022011159
#VU58911 - Improper input validation
CVE-2021-42294		 CWE-20 High
No
No
 - 14.12.2021 SB2021121449
#VU58070 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-40442		 CWE-94 High
No
No
 - 09.11.2021 SB2021110941
#VU57262 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-40485		 CWE-94 High
No
No
 - 12.10.2021 SB2021101217
#VU57261 - Use After Free
CVE-2021-40486		 CWE-416 High
No
No
 - 12.10.2021 SB2021101216
#VU55718 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-36940		 CWE-451 Medium
No
No
 - 10.08.2021 SB2021081029
#VU54753 - Improper Validation of Integrity Check Value
CVE-2021-34519		 CWE-354 Medium
No
No
 - 13.07.2021 SB2021071338
#VU54751 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-34517		 CWE-451 Medium
No
No
 - 13.07.2021 SB2021071338
#VU53878 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-31963		 CWE-94 Medium
No
No
 - 08.06.2021 SB2021060805
#VU53873 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-31966		 CWE-94 Low
No
No
 - 08.06.2021 SB2021060805
#VU52171 - Improper input validation
CVE-2021-28450		 CWE-20 Medium
No
No
 - 13.04.2021 SB2021041353
#VU52143 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-28453		 CWE-94 High
No
No
 - 13.04.2021 SB2021041329
#VU49431 - Improper input validation
CVE-2021-1716		 CWE-20 High
No
No
 - 12.01.2021 SB2021011228
#VU49430 - Improper input validation
CVE-2021-1715		 CWE-20 High
No
No
 - 12.01.2021 SB2021011228
#VU49429 - Improper input validation
CVE-2021-1714		 CWE-20 High
No
No
 - 12.01.2021 SB2021011227
#VU48302 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2020-17060		 CWE-451 Medium
No
No
 - 10.11.2020 SB2020111044


Showing elements 1 - 20 out of 122