Known vulnerabilities in Microsoft SharePoint Server 2016 - page 2

Vendor: Microsoft
Software: Microsoft SharePoint Server
Version: 2016
Software CPE: cpe:2.3:a:microsoft:microsoft_sharepoint_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 265
Public exploits: 13
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Microsoft SharePoint Server version 2016 Microsoft SharePoint Server 2016 is affected by 265 vulnerabilities: 1 critical, 50 high, 97 medium, 117 low Critical High Medium Low

Vulnerabilities (265)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU56499 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-38651		 CWE-451 Medium
No
No
 - 14.09.2021 SB2021091416
#VU56498 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-38652		 CWE-451 Low
No
No
 - 14.09.2021 SB2021091416
#VU55718 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-36940		 CWE-451 Medium
No
No
 - 10.08.2021 SB2021081029
#VU54755 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-34467		 CWE-94 Medium
No
No
 - 13.07.2021 SB2021071338
#VU54754 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-34468		 CWE-94 Medium
No
No
 - 13.07.2021 SB2021071338
#VU54753 - Improper Validation of Integrity Check Value
CVE-2021-34519		 CWE-354 Medium
No
No
 - 13.07.2021 SB2021071338
#VU54752 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-34520		 CWE-94 Medium
No
No
 - 13.07.2021 SB2021071338
#VU54751 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-34517		 CWE-451 Medium
No
No
 - 13.07.2021 SB2021071338
#VU53878 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-31963		 CWE-94 Medium
No
No
 - 08.06.2021 SB2021060805
#VU53877 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-26420		 CWE-94 Medium
No
No
 - 08.06.2021 SB2021060805
#VU53876 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-31964		 CWE-451 Medium
No
No
 - 08.06.2021 SB2021060805
#VU53875 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-31950		 CWE-451 Medium
Public exploit available
No
 - 08.06.2021 SB2021060805
#VU53874 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-31948		 CWE-451 Medium
No
No
 - 08.06.2021 SB2021060805
#VU53873 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-31966		 CWE-94 Low
No
No
 - 08.06.2021 SB2021060805
#VU53872 - Exposure of sensitive information to an unauthorized actor
CVE-2021-31965		 CWE-200 Medium
No
No
 - 08.06.2021 SB2021060805
#VU53081 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-31181		 CWE-94 Medium
Public exploit available
No
 - 11.05.2021 SB2021051111
#VU53080 - Exposure of sensitive information to an unauthorized actor
CVE-2021-31173		 CWE-200 Medium
No
No
 - 11.05.2021 SB2021051111
#VU53079 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-31172		 CWE-451 Medium
No
No
 - 11.05.2021 SB2021051111
#VU53078 - Exposure of sensitive information to an unauthorized actor
CVE-2021-31171		 CWE-200 Low
No
No
 - 11.05.2021 SB2021051111
#VU53075 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-28474		 CWE-94 Medium
No
No
 - 11.05.2021 SB2021051111


Showing elements 21 - 40 out of 265