Known vulnerabilities in Microsoft SharePoint Server 2013 - page 5

Vendor: Microsoft
Software: Microsoft SharePoint Server
Version: 2013
Software CPE: cpe:2.3:a:microsoft:microsoft_sharepoint_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 122
Public exploits: 4
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Microsoft SharePoint Server version 2013 Microsoft SharePoint Server 2013 is affected by 122 vulnerabilities: 2 critical, 36 high, 28 medium, 56 low Critical High Medium Low

Vulnerabilities (122)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU16482 - Memory corruption
CVE-2018-8628		 CWE-119 High
No
No
 - 11.12.2018 SB2018121119
#VU16450 - Cross-Site Request Forgery (CSRF)
CVE-2018-8580		 CWE-352 Low
No
No
 - 11.12.2018 SB2018121104
#VU16449 - Permissions, Privileges, and Access Controls
CVE-2018-8635		 CWE-264 High
No
No
 - 11.12.2018 SB2018121104
#VU15840 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-8572		 CWE-79 Low
No
No
 - 13.11.2018 SB2018111312
#VU15839 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-8568		 CWE-79 Low
No
No
 - 13.11.2018 SB2018111312
#VU15838 - Exposure of sensitive information to an unauthorized actor
CVE-2018-8578		 CWE-200 Low
No
No
 - 13.11.2018 SB2018111312
#VU15246 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-8498		 CWE-79 Low
No
No
 - 09.10.2018 SB2018100918
#VU15245 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-8518		 CWE-79 Low
No
No
 - 09.10.2018 SB2018100918
SB2022012069
SB2022012550
#VU15244 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-8488		 CWE-79 Low
No
No
 - 09.10.2018 SB2018100918
#VU14776 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-8431		 CWE-79 Low
No
No
 - 13.09.2018 SB2018091302
#VU14775 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-8428		 CWE-79 Medium
No
No
 - 13.09.2018 SB2018091302
#VU14774 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-8426		 CWE-79 Low
No
No
 - 13.09.2018 SB2018091302
#VU14398 - Out-of-bounds read
CVE-2018-8378		 CWE-125 Low
No
No
 - 14.08.2018 SB2018081429
#VU13770 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-8323		 CWE-79 Low
No
No
 - 10.07.2018 SB2018071010
#VU13771 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-8299		 CWE-79 Low
No
No
 - 10.07.2018 SB2018071010
#VU12497 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-8168		 CWE-79 Low
No
No
 - 08.05.2018 SB2018050824
#VU12498 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-8149		 CWE-79 Low
No
No
 - 08.05.2018 SB2018050824
#VU11736 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-1014		 CWE-79 Low
No
No
 - 10.04.2018 SB2018041032
#VU11737 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-1005		 CWE-79 Low
No
No
 - 10.04.2018 SB2018041032
#VU11738 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-1032		 CWE-79 Low
No
No
 - 10.04.2018 SB2018041032


Showing elements 81 - 100 out of 122