Known vulnerabilities in Microsoft SharePoint Server 2016 - page 5

Vendor: Microsoft
Version: 2016
Software CPE: cpe:2.3:a:microsoft:microsoft_sharepoint_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 265
Public exploits: 13
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Microsoft SharePoint Server version 2016 Microsoft SharePoint Server 2016 is affected by 265 vulnerabilities: 1 critical, 50 high, 97 medium, 117 low Critical High Medium Low

Vulnerabilities (265)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU46414 - Improper input validation
CVE-2020-1452
CWE-20 Medium
No
No
- 08.09.2020 SB2020090815
#VU46413 - Improper input validation
CVE-2020-1453
CWE-20 Medium
No
No
- 08.09.2020 SB2020090815
#VU46408 - Improper input validation
CVE-2020-1576
CWE-20 Medium
No
No
- 08.09.2020 SB2020090815
#VU46406 - Improper input validation
CVE-2020-1200
CWE-20 Medium
No
No
- 08.09.2020 SB2020090815
#VU46405 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2020-1205
CWE-451 Medium
No
No
- 08.09.2020 SB2020090815
#VU46402 - Improper input validation
CVE-2020-1210
CWE-20 Medium
No
No
- 08.09.2020 SB2020090815
#VU46400 - Improper input validation
CVE-2020-1440
CWE-20 Medium
No
No
- 08.09.2020 SB2020090815
#VU46398 - Improper input validation
CVE-2020-1595
CWE-20 Medium
No
No
- 08.09.2020 SB2020090815
#VU46392 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-1345
CWE-79 Low
No
No
- 08.09.2020 SB2020090809
#VU46390 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-1198
CWE-79 Low
No
No
- 08.09.2020 SB2020090809
#VU46389 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-1227
CWE-79 Low
No
No
- 08.09.2020 SB2020090809
#VU46388 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-1482
CWE-79 Low
No
No
- 08.09.2020 SB2020090809
#VU46387 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-1514
CWE-79 Low
No
No
- 08.09.2020 SB2020090809
#VU45548 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-1573
CWE-79 Medium
No
No
- 11.08.2020 SB2020081121
#VU45547 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-1580
CWE-79 Medium
No
No
- 11.08.2020 SB2020081121
#VU45546 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-1499
CWE-79 Low
No
No
- 11.08.2020 SB2020081121
#VU45545 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-1500
CWE-79 Low
No
No
- 11.08.2020 SB2020081121
#VU45544 - Out-of-bounds read
CVE-2020-1505
CWE-125 Medium
No
No
- 11.08.2020 SB2020081121
#VU45543 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-1501
CWE-79 Low
No
No
- 11.08.2020 SB2020081121
#VU45533 - Out-of-bounds read
CVE-2020-1583
CWE-125 Low
No
No
- 11.08.2020 SB2020081117


Showing elements 81 - 100 out of 265