Known vulnerabilities in Microsoft SharePoint Server 2016 - page 10

Vendor: Microsoft
Software: Microsoft SharePoint Server
Version: 2016
Software CPE: cpe:2.3:a:microsoft:microsoft_sharepoint_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 265
Public exploits: 13
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Microsoft SharePoint Server version 2016 Microsoft SharePoint Server 2016 is affected by 265 vulnerabilities: 1 critical, 50 high, 97 medium, 117 low Critical High Medium Low

Vulnerabilities (265)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU20261 - Stack-based buffer overflow
CVE-2019-1201		 CWE-121 High
No
No
 - 14.08.2019 SB2019081403
SB2019081404
#VU18935 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-1134		 CWE-79 Medium
No
No
 - 28.06.2019 SB2019062801
#VU18782 - Memory corruption
CVE-2019-1034		 CWE-119 High
No
No
 - 12.06.2019 SB2019061206
#VU18781 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-1033		 CWE-79 Low
No
No
 - 12.06.2019 SB2019061205
#VU18780 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-1032		 CWE-79 Low
No
No
 - 12.06.2019 SB2019061205
#VU18779 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-1031		 CWE-79 Low
No
No
 - 12.06.2019 SB2019061205
#VU18778 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-1036		 CWE-79 Low
No
No
 - 12.06.2019 SB2019061205
#VU18469 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-0957		 CWE-79 Medium
No
No
 - 15.05.2019 SB2019051504
#VU18468 - Improper Control of Generation of Code ('Code Injection')
CVE-2019-0952		 CWE-94 High
No
No
 - 15.05.2019 SB2019051504
#VU18466 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-0950		 CWE-79 Medium
No
No
 - 15.05.2019 SB2019051504
#VU18465 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-0949		 CWE-79 Medium
No
No
 - 15.05.2019 SB2019051504
#VU18462 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-0956		 CWE-79 Medium
No
No
 - 15.05.2019 SB2019051504
#VU18202 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-0831		 CWE-79 Low
No
No
 - 10.04.2019 SB2019041015
#VU18201 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-0830		 CWE-79 Low
No
No
 - 10.04.2019 SB2019041015
#VU17952 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-0778		 CWE-79 Medium
No
No
 - 13.03.2019 SB2019031302
#VU17627 - Improper Control of Generation of Code ('Code Injection')
CVE-2019-0594		 CWE-94 Medium
No
No
 - 13.02.2019 SB2019021307
#VU17624 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-0668		 CWE-79 Low
No
No
 - 13.02.2019 SB2019021307
#VU17622 - Improper Control of Generation of Code ('Code Injection')
CVE-2019-0604		 CWE-94 High
Public exploit available
Exploited
 - 13.02.2019 SB2019021307
#VU16881 - Memory corruption
CVE-2019-0585		 CWE-119 High
No
No
 - 08.01.2019 SB2019010825
#VU16841 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-0562		 CWE-79 Low
No
No
 - 08.01.2019 SB2019010807


Showing elements 181 - 200 out of 265