Known vulnerabilities in Microsoft SharePoint Server 2019 - page 3

Vendor: Microsoft
Software: Microsoft SharePoint Server
Version: 2019
Software CPE: cpe:2.3:a:microsoft:microsoft_sharepoint_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 317
Public exploits: 17
Known exploited (KEV): 9
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Microsoft SharePoint Server version 2019 Microsoft SharePoint Server 2019 is affected by 317 vulnerabilities: 1 critical, 73 high, 157 medium, 86 low Critical High Medium Low

Vulnerabilities (317)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU110998 - Heap-based Buffer Overflow
CVE-2025-47169		 CWE-122 High
No
No
 - 10.06.2025 SB20250610104
#VU110710 - Deserialization of Untrusted Data
CVE-2025-47163		 CWE-502 Medium
No
No
 - 10.06.2025 SB2025061069
#VU110709 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-47172		 CWE-89 Medium
No
No
 - 10.06.2025 SB2025061069
#VU110707 - Deserialization of Untrusted Data
CVE-2025-47166		 CWE-502 Medium
No
No
 - 10.06.2025 SB2025061069
#VU109082 - Deserialization of Untrusted Data
CVE-2025-30384		 CWE-502 High
No
No
 - 13.05.2025 SB2025051391
#VU109081 - Improper Privilege Management
CVE-2025-29976		 CWE-269 Low
No
No
 - 13.05.2025 SB2025051391
#VU109080 - Deserialization of Untrusted Data
CVE-2025-30378		 CWE-502 High
No
No
 - 13.05.2025 SB2025051391
#VU109079 - Deserialization of Untrusted Data
CVE-2025-30382		 CWE-502 High
No
No
 - 13.05.2025 SB2025051391
#VU107288 - Deserialization of Untrusted Data
CVE-2025-29793		 CWE-502 Low
No
No
 - 09.04.2025 SB2025040955
#VU107287 - Improper Authorization
CVE-2025-29794		 CWE-285 Medium
No
No
 - 09.04.2025 SB2025040955
#VU107266 - Untrusted Pointer Dereference
CVE-2025-27747		 CWE-822 High
No
No
 - 09.04.2025 SB2025040924
#VU107211 - Integer overflow
CVE-2025-26642		 CWE-190 High
No
No
 - 08.04.2025 SB2025040874
#VU103790 - Improper Authorization
CVE-2025-21400		 CWE-285 Medium
No
No
 - 11.02.2025 SB2025021196
#VU102664 - Improper Authorization
CVE-2025-21348		 CWE-285 Low
No
No
 - 14.01.2025 SB2025011454
#VU102662 - Improper input validation
CVE-2025-21344		 CWE-20 High
No
No
 - 14.01.2025 SB2025011454
#VU102660 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-21393		 CWE-79 Low
No
No
 - 14.01.2025 SB2025011454
#VU101593 - Out-of-bounds read
CVE-2024-49065		 CWE-125 Medium
No
No
 - 10.12.2024 SB20241210110
#VU101442 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-49062		 CWE-22 Medium
No
No
 - 10.12.2024 SB2024121087
#VU101441 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-49064		 CWE-611 Medium
No
No
 - 10.12.2024 SB2024121087
#VU101439 - Improper Access Control
CVE-2024-49068		 CWE-284 High
No
No
 - 10.12.2024 SB2024121087


Showing elements 41 - 60 out of 317