Known vulnerabilities in Microsoft SharePoint Server 2019 - page 5

Vendor: Microsoft
Software: Microsoft SharePoint Server
Version: 2019
Software CPE: cpe:2.3:a:microsoft:microsoft_sharepoint_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 317
Public exploits: 17
Known exploited (KEV): 9
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Microsoft SharePoint Server version 2019 Microsoft SharePoint Server 2019 is affected by 317 vulnerabilities: 1 critical, 73 high, 157 medium, 86 low Critical High Medium Low

Vulnerabilities (317)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU79177 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2023-36892		 CWE-451 Medium
No
No
 - 08.08.2023 SB2023080881
#VU79176 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2023-36891		 CWE-451 Medium
No
No
 - 08.08.2023 SB2023080881
#VU78177 - Improper input validation
CVE-2023-33157		 CWE-20 Medium
No
No
 - 12.07.2023 SB2023071235
#VU78129 - Security Features
CVE-2023-33165		 CWE-254 Low
No
No
 - 11.07.2023 SB2023071179
#VU78128 - Improper input validation
CVE-2023-33160		 CWE-20 Medium
No
No
 - 11.07.2023 SB2023071179
#VU78115 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2023-33159		 CWE-451 High
No
No
 - 11.07.2023 SB2023071179
#VU78113 - Improper input validation
CVE-2023-33134		 CWE-20 Medium
No
No
 - 11.07.2023 SB2023071179
#VU77272 - Improper input validation
CVE-2023-33129		 CWE-20 Medium
No
No
 - 14.06.2023 SB2023061401
#VU77225 - Improper Authentication
CVE-2023-29357		 CWE-287 High
Public exploit available
Exploited
 - 13.06.2023 SB2023061350
#VU77224 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2023-33130		 CWE-451 Medium
No
No
 - 13.06.2023 SB2023061350
#VU77223 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2023-33132		 CWE-451 Medium
No
No
 - 13.06.2023 SB2023061350
#VU77222 - Permissions, Privileges, and Access Controls
CVE-2023-33142		 CWE-264 Medium
No
No
 - 13.06.2023 SB2023061350
#VU75909 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2023-24950		 CWE-451 Medium
No
No
 - 09.05.2023 SB20230509101
#VU75908 - Exposure of sensitive information to an unauthorized actor
CVE-2023-24954		 CWE-200 Medium
No
No
 - 09.05.2023 SB20230509101
#VU75907 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-24955		 CWE-94 High
Public exploit available
Exploited
 - 09.05.2023 SB20230509101
#VU74976 - Server-Side Request Forgery (SSRF)
CVE-2023-28288		 CWE-918 Medium
Public exploit available
No
 - 11.04.2023 SB2023041195
#VU73599 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2023-23395		 CWE-451 Low
No
No
 - 14.03.2023 SB2023031458
#VU72229 - Improper Access Control
CVE-2023-21717		 CWE-284 Medium
No
No
 - 15.02.2023 SB2023021512
#VU70958 - Improper input validation
CVE-2023-21742		 CWE-20 Medium
Public exploit available
No
 - 10.01.2023 SB2023011051
#VU70957 - Improper input validation
CVE-2023-21744		 CWE-20 Medium
No
No
 - 10.01.2023 SB2023011051


Showing elements 81 - 100 out of 317