Known vulnerabilities in Microsoft SharePoint Server 2016 - page 8

Vendor: Microsoft
Version: 2016
Software CPE: cpe:2.3:a:microsoft:microsoft_sharepoint_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 265
Public exploits: 13
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Microsoft SharePoint Server version 2016 Microsoft SharePoint Server 2016 is affected by 265 vulnerabilities: 1 critical, 50 high, 97 medium, 117 low Critical High Medium Low

Vulnerabilities (265)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU26829 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2020-0976
CWE-451 Medium
Public exploit available
No
- 14.04.2020 SB2020041410
#VU26828 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2020-0975
CWE-451 Medium
No
No
- 14.04.2020 SB2020041410
#VU26827 - Improper input validation
CVE-2020-0974
CWE-20 High
No
No
- 14.04.2020 SB2020041410
#VU26826 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2020-0972
CWE-451 Medium
No
No
- 14.04.2020 SB2020041410
#VU26825 - Improper input validation
CVE-2020-0971
CWE-20 High
No
No
- 14.04.2020 SB2020041410
#VU26824 - Improper input validation
CVE-2020-0932
CWE-20 High
No
No
- 14.04.2020 SB2020041410
#VU26823 - Improper input validation
CVE-2020-0931
CWE-20 High
No
No
- 14.04.2020 SB2020041410
#VU26822 - Improper input validation
CVE-2020-0929
CWE-20 High
No
No
- 14.04.2020 SB2020041410
#VU26821 - Improper input validation
CVE-2020-0920
CWE-20 High
No
No
- 14.04.2020 SB2020041410
#VU26788 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-0978
CWE-79 Low
No
No
- 14.04.2020 SB2020041404
#VU26787 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-0973
CWE-79 Low
No
No
- 14.04.2020 SB2020041404
#VU26786 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-0954
CWE-79 Low
No
No
- 14.04.2020 SB2020041404
#VU26785 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-0933
CWE-79 Low
No
No
- 14.04.2020 SB2020041404
#VU26784 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-0930
CWE-79 Low
No
No
- 14.04.2020 SB2020041404
#VU26783 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-0927
CWE-79 Low
No
No
- 14.04.2020 SB2020041404
#VU26782 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-0926
CWE-79 Low
No
No
- 14.04.2020 SB2020041404
#VU26781 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-0925
CWE-79 Low
No
No
- 14.04.2020 SB2020041404
#VU26780 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-0924
CWE-79 Low
No
No
- 14.04.2020 SB2020041404
#VU26779 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-0923
CWE-79 Low
No
No
- 14.04.2020 SB2020041404
#VU25917 - Memory corruption
CVE-2020-0892
CWE-119 High
No
No
- 10.03.2020 SB2020031026


Showing elements 141 - 160 out of 265