Known vulnerabilities in Microsoft SharePoint Server 2019 - page 12

Vendor: Microsoft
Software: Microsoft SharePoint Server
Version: 2019
Software CPE: cpe:2.3:a:microsoft:microsoft_sharepoint_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 317
Public exploits: 17
Known exploited (KEV): 9
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Microsoft SharePoint Server version 2019 Microsoft SharePoint Server 2019 is affected by 317 vulnerabilities: 1 critical, 73 high, 157 medium, 86 low Critical High Medium Low

Vulnerabilities (317)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU45532 - Out-of-bounds read
CVE-2020-1503		 CWE-125 Low
No
No
 - 11.08.2020 SB2020081117
#VU29836 - XML Injection
CVE-2020-1147		 CWE-91 High
Public exploit available
Exploited
 - 14.07.2020 SB2020071463
SB20200716119
SB20200716120
and 6 more
#VU29774 - XML Injection
CVE-2020-1439		 CWE-91 High
No
No
 - 14.07.2020 SB2020071426
#VU29772 - Memory corruption
CVE-2020-1446		 CWE-119 High
No
No
 - 14.07.2020 SB2020071424
#VU29771 - Memory corruption
CVE-2020-1447		 CWE-119 High
No
No
 - 14.07.2020 SB2020071424
#VU29766 - Memory corruption
CVE-2020-1448		 CWE-119 High
No
No
 - 14.07.2020 SB2020071424
#VU29764 - Improper input validation
CVE-2020-1444		 CWE-20 High
Public exploit available
No
 - 14.07.2020 SB2020071422
#VU29763 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2020-1443		 CWE-451 Medium
No
No
 - 14.07.2020 SB2020071422
#VU29762 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-1454		 CWE-79 Low
No
No
 - 14.07.2020 SB2020071422
#VU29734 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-1451		 CWE-79 Low
No
No
 - 14.07.2020 SB2020071415
#VU29733 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-1450		 CWE-79 Low
No
No
 - 14.07.2020 SB2020071415
#VU29732 - Out-of-bounds read
CVE-2020-1445		 CWE-125 Medium
No
No
 - 14.07.2020 SB2020071415
#VU29731 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-1456		 CWE-79 Low
No
No
 - 14.07.2020 SB2020071415
#VU29730 - Out-of-bounds read
CVE-2020-1342		 CWE-125 Medium
No
No
 - 14.07.2020 SB2020071415
#VU29729 - Memory corruption
CVE-2020-1025		 CWE-119 Low
No
No
 - 14.07.2020 SB2020071415
#VU28874 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2020-1323		 CWE-601 Medium
No
No
 - 09.06.2020 SB2020060942
#VU28832 - Permissions, Privileges, and Access Controls
CVE-2020-1295		 CWE-264 Medium
No
No
 - 09.06.2020 SB2020060918
#VU28831 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2020-1148		 CWE-451 Medium
No
No
 - 09.06.2020 SB2020060918
#VU28830 - Server-Side Request Forgery (SSRF)
CVE-2020-1178		 CWE-918 High
No
No
 - 09.06.2020 SB2020060918
#VU28829 - Improper input validation
CVE-2020-1181		 CWE-20 Medium
No
No
 - 09.06.2020 SB2020060918


Showing elements 221 - 240 out of 317