Known vulnerabilities in Microsoft SharePoint Server 2016 - page 13

Vendor: Microsoft
Software: Microsoft SharePoint Server
Version: 2016
Software CPE: cpe:2.3:a:microsoft:microsoft_sharepoint_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 265
Public exploits: 13
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Microsoft SharePoint Server version 2016 Microsoft SharePoint Server 2016 is affected by 265 vulnerabilities: 1 critical, 50 high, 97 medium, 117 low Critical High Medium Low

Vulnerabilities (265)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU18503 - Memory corruption
CVE-2017-8509		 CWE-119 High
No
No
 - 16.05.2019 SB2017061339
#VU11023 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-0944		 CWE-79 Low
No
No
 - 13.03.2018 SB2018031310
SB2018031312
#VU11022 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-0923		 CWE-79 Low
No
No
 - 13.03.2018 SB2018031310
#VU11021 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-0921		 CWE-79 Low
No
No
 - 13.03.2018 SB2018031310
#VU11020 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-0916		 CWE-79 Low
No
No
 - 13.03.2018 SB2018031310
SB2018031312
#VU10530 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-0869		 CWE-79 Low
No
No
 - 13.02.2018 SB2018021312
#VU10529 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-0864		 CWE-79 Low
No
No
 - 13.02.2018 SB2018021312
SB2018021313
#VU9918 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-0790		 CWE-79 Low
No
No
 - 09.01.2018 SB2018010907
#VU9916 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-0799		 CWE-79 Low
No
No
 - 09.01.2018 SB2018010907
#VU9911 - Memory corruption
CVE-2018-0792		 CWE-119 High
No
No
 - 09.01.2018 SB2018010911
SB2018010907
#VU9898 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-0789		 CWE-79 Low
No
No
 - 09.01.2018 SB2018010907
SB2018010908
#VU9648 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-11936		 CWE-79 Low
No
No
 - 12.12.2017 SB2017121214
#VU9314 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-11876		 CWE-79 Low
No
No
 - 14.11.2017 SB2017111424
SB2017111425
#VU8754 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-11775		 CWE-79 Low
No
No
 - 10.10.2017 SB2017101003
#VU8755 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-11777		 CWE-79 Low
No
No
 - 10.10.2017 SB2017101003
#VU8756 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-11820		 CWE-79 Low
No
No
 - 10.10.2017 SB2017101003
#VU8308 - Memory corruption
CVE-2017-8743		 CWE-119 High
No
No
 - 12.09.2017 SB2017091221
#VU8311 - Memory corruption
CVE-2017-8742		 CWE-119 High
No
No
 - 12.09.2017 SB2017091221
#VU7420 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-8569		 CWE-79 Low
No
No
 - 11.07.2017 SB2017071110
#VU12930 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-8514		 CWE-79 Low
No
No
 - 13.06.2017 SB2017061334


Showing elements 241 - 260 out of 265