Known vulnerabilities in Microsoft SharePoint Server - page 11

Vendor: Microsoft
Software CPE: cpe:2.3:a:microsoft:microsoft_sharepoint_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 532
Public exploits: 24
Known exploited (KEV): 19
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft SharePoint Server Microsoft SharePoint Server is affected by 532 known vulnerabilities: 4 critical, 122 high, 211 medium, 195 low Critical High Medium Low

Vulnerabilities (532)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU75909 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2023-24950
CWE-451 Medium
No
No
- 09.05.2023 SB20230509101
#VU75908 - Exposure of sensitive information to an unauthorized actor
CVE-2023-24954
CWE-200 Medium
No
No
- 09.05.2023 SB20230509101
#VU74976 - Server-Side Request Forgery (SSRF)
CVE-2023-28288
CWE-918 Medium
Available
No
- 11.04.2023 SB2023041195
#VU73599 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2023-23395
CWE-451 Low
No
No
- 14.03.2023 SB2023031458
#VU72229 - Improper Access Control
CVE-2023-21717
CWE-284 Medium
No
No
- 15.02.2023 SB2023021512
#VU70959 - Security Features
CVE-2023-21743
CWE-254 Medium
No
No
- 10.01.2023 SB2023011051
#VU70958 - Improper input validation
CVE-2023-21742
CWE-20 Medium
Available
No
- 10.01.2023 SB2023011051
#VU70957 - Improper input validation
CVE-2023-21744
CWE-20 Medium
No
No
- 10.01.2023 SB2023011051
#VU69087 - Exposure of sensitive information to an unauthorized actor
CVE-2022-41060
CWE-200 Medium
No
No
- 08.11.2022 SB2022110818
#VU69086 - Exposure of sensitive information to an unauthorized actor
CVE-2022-41103
CWE-200 Medium
No
No
- 08.11.2022 SB2022110818
#VU69085 - Improper input validation
CVE-2022-41061
CWE-20 High
No
No
- 08.11.2022 SB2022110818
#VU69069 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2022-41122
CWE-451 Medium
No
No
- 08.11.2022 SB2022110807
#VU69068 - Improper input validation
CVE-2022-41062
CWE-20 Medium
No
No
- 08.11.2022 SB2022110807
#VU68220 - Improper input validation
CVE-2022-41037
CWE-20 Medium
No
No
- 12.10.2022 SB2022101213
#VU68219 - Improper input validation
CVE-2022-41036
CWE-20 Medium
No
No
- 12.10.2022 SB2022101213
#VU68218 - Improper input validation
CVE-2022-41038
CWE-20 Medium
No
No
- 12.10.2022 SB2022101213
#VU68217 - Improper input validation
CVE-2022-38053
CWE-20 Medium
No
No
- 12.10.2022 SB2022101213
#VU67284 - Improper input validation
CVE-2022-37961
CWE-20 Medium
No
No
- 13.09.2022 SB2022091379
#VU67283 - Improper input validation
CVE-2022-38009
CWE-20 Medium
No
No
- 13.09.2022 SB2022091379
#VU67281 - Deserialization of Untrusted Data
CVE-2022-35823
CWE-502 Medium
No
No
- 13.09.2022 SB2022091379


Showing elements 201 - 220 out of 532