Known vulnerabilities in Microsoft SharePoint Server 2019 - page 14

Vendor: Microsoft
Version: 2019
Software CPE: cpe:2.3:a:microsoft:microsoft_sharepoint_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 317
Public exploits: 17
Known exploited (KEV): 9
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Microsoft SharePoint Server version 2019 Microsoft SharePoint Server 2019 is affected by 317 vulnerabilities: 1 critical, 73 high, 157 medium, 86 low Critical High Medium Low

Vulnerabilities (317)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU26827 - Improper input validation
CVE-2020-0974
CWE-20 High
No
No
- 14.04.2020 SB2020041410
#VU26826 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2020-0972
CWE-451 Medium
No
No
- 14.04.2020 SB2020041410
#VU26825 - Improper input validation
CVE-2020-0971
CWE-20 High
No
No
- 14.04.2020 SB2020041410
#VU26824 - Improper input validation
CVE-2020-0932
CWE-20 High
No
No
- 14.04.2020 SB2020041410
#VU26823 - Improper input validation
CVE-2020-0931
CWE-20 High
No
No
- 14.04.2020 SB2020041410
#VU26822 - Improper input validation
CVE-2020-0929
CWE-20 High
No
No
- 14.04.2020 SB2020041410
#VU26821 - Improper input validation
CVE-2020-0920
CWE-20 High
No
No
- 14.04.2020 SB2020041410
#VU26788 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-0978
CWE-79 Low
No
No
- 14.04.2020 SB2020041404
#VU26787 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-0973
CWE-79 Low
No
No
- 14.04.2020 SB2020041404
#VU26786 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-0954
CWE-79 Low
No
No
- 14.04.2020 SB2020041404
#VU26785 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-0933
CWE-79 Low
No
No
- 14.04.2020 SB2020041404
#VU26784 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-0930
CWE-79 Low
No
No
- 14.04.2020 SB2020041404
#VU26783 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-0927
CWE-79 Low
No
No
- 14.04.2020 SB2020041404
#VU26782 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-0926
CWE-79 Low
No
No
- 14.04.2020 SB2020041404
#VU26781 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-0925
CWE-79 Low
No
No
- 14.04.2020 SB2020041404
#VU26780 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-0924
CWE-79 Low
No
No
- 14.04.2020 SB2020041404
#VU26779 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-0923
CWE-79 Low
No
No
- 14.04.2020 SB2020041404
#VU25917 - Memory corruption
CVE-2020-0892
CWE-119 High
No
No
- 10.03.2020 SB2020031026
#VU25915 - Memory corruption
CVE-2020-0852
CWE-119 High
No
No
- 10.03.2020 SB2020031026
#VU25913 - Memory corruption
CVE-2020-0850
CWE-119 High
No
No
- 10.03.2020 SB2020031026


Showing elements 261 - 280 out of 317