Known vulnerabilities in Microsoft SharePoint Server 2013 - page 6

Vendor: Microsoft
Software: Microsoft SharePoint Server
Version: 2013
Software CPE: cpe:2.3:a:microsoft:microsoft_sharepoint_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 122
Public exploits: 4
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Microsoft SharePoint Server version 2013 Microsoft SharePoint Server 2013 is affected by 122 vulnerabilities: 2 critical, 36 high, 28 medium, 56 low Critical High Medium Low

Vulnerabilities (122)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU18503 - Memory corruption
CVE-2017-8509		 CWE-119 High
No
No
 - 16.05.2019 SB2017061339
#VU11708 - Memory corruption
CVE-2018-1028		 CWE-119 High
No
No
 - 10.04.2018 SB2018041024
#VU11022 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-0923		 CWE-79 Low
No
No
 - 13.03.2018 SB2018031310
#VU11053 - Out-of-bounds read
CVE-2018-0919		 CWE-125 Low
No
No
 - 13.03.2018 SB2018031326
#VU11057 - Memory corruption
CVE-2018-0922		 CWE-119 High
No
No
 - 13.03.2018 SB2018031326
#VU9918 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-0790		 CWE-79 Low
No
No
 - 09.01.2018 SB2018010907
#VU9916 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-0799		 CWE-79 Low
No
No
 - 09.01.2018 SB2018010907
#VU9898 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-0789		 CWE-79 Low
No
No
 - 09.01.2018 SB2018010907
SB2018010908
#VU8754 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-11775		 CWE-79 Low
No
No
 - 10.10.2017 SB2017101003
#VU8755 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-11777		 CWE-79 Low
No
No
 - 10.10.2017 SB2017101003
#VU8756 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-11820		 CWE-79 Low
No
No
 - 10.10.2017 SB2017101003
#VU8250 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-8629		 CWE-79 Low
No
No
 - 12.09.2017 SB2017091209
#VU8311 - Memory corruption
CVE-2017-8742		 CWE-119 High
No
No
 - 12.09.2017 SB2017091221
#VU7225 - Memory corruption
CVE-2017-8511		 CWE-119 High
No
No
 - 13.06.2017 SB2017061343
#VU6456 - Memory corruption
CVE-2017-0281		 CWE-119 High
No
No
 - 09.05.2017 SB2017050906
#VU6027 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-0107		 CWE-79 Low
No
No
 - 14.03.2017 SB2017031423
SB20170314164
#VU5561 - Missing release of memory after effective lifetime
CVE-2015-2375		 CWE-401 Low
No
No
 - 31.01.2017 SB2015071402
SB2015071405
#VU5554 - Memory corruption
CVE-2015-2376		 CWE-119 High
No
No
 - 31.01.2017 SB2015071402
SB2015071405
#VU5465 - Use After Free
CVE-2015-1650		 CWE-416 High
No
No
 - 27.01.2017 SB2015041401
SB2015041402
#VU5288 - Memory corruption
CVE-2015-2468		 CWE-119 High
Public exploit available
No
 - 24.01.2017 SB2015081102


Showing elements 101 - 120 out of 122