Known vulnerabilities in Microsoft SharePoint Server 2016 - page 11

Vendor: Microsoft
Software: Microsoft SharePoint Server
Version: 2016
Software CPE: cpe:2.3:a:microsoft:microsoft_sharepoint_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 265
Public exploits: 13
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Microsoft SharePoint Server version 2016 Microsoft SharePoint Server 2016 is affected by 265 vulnerabilities: 1 critical, 50 high, 97 medium, 117 low Critical High Medium Low

Vulnerabilities (265)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU16842 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-0558		 CWE-79 Low
No
No
 - 08.01.2019 SB2019010807
#VU16843 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-0557		 CWE-79 Low
No
No
 - 08.01.2019 SB2019010807
#VU16487 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-8650		 CWE-79 Low
No
No
 - 11.12.2018 SB2018121125
#VU16482 - Memory corruption
CVE-2018-8628		 CWE-119 High
No
No
 - 11.12.2018 SB2018121119
#VU16450 - Cross-Site Request Forgery (CSRF)
CVE-2018-8580		 CWE-352 Low
No
No
 - 11.12.2018 SB2018121104
#VU16449 - Permissions, Privileges, and Access Controls
CVE-2018-8635		 CWE-264 High
No
No
 - 11.12.2018 SB2018121104
#VU15840 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-8572		 CWE-79 Low
No
No
 - 13.11.2018 SB2018111312
#VU15839 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-8568		 CWE-79 Low
No
No
 - 13.11.2018 SB2018111312
#VU15246 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-8498		 CWE-79 Low
No
No
 - 09.10.2018 SB2018100918
#VU15245 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-8518		 CWE-79 Low
No
No
 - 09.10.2018 SB2018100918
SB2022012069
SB2022012550
#VU15244 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-8488		 CWE-79 Low
No
No
 - 09.10.2018 SB2018100918
#VU15243 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-8480		 CWE-79 Low
No
No
 - 09.10.2018 SB2018100918
#VU14776 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-8431		 CWE-79 Low
No
No
 - 13.09.2018 SB2018091302
#VU14775 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-8428		 CWE-79 Medium
No
No
 - 13.09.2018 SB2018091302
#VU14774 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-8426		 CWE-79 Low
No
No
 - 13.09.2018 SB2018091302
#VU14398 - Out-of-bounds read
CVE-2018-8378		 CWE-125 Low
No
No
 - 14.08.2018 SB2018081429
#VU13770 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-8323		 CWE-79 Low
No
No
 - 10.07.2018 SB2018071010
#VU13771 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-8299		 CWE-79 Low
No
No
 - 10.07.2018 SB2018071010
#VU13772 - Improper input validation
CVE-2018-8300		 CWE-20 High
No
No
 - 10.07.2018 SB2018071010
#VU13288 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-8254		 CWE-79 Low
No
No
 - 12.06.2018 SB2018061211


Showing elements 201 - 220 out of 265