Known vulnerabilities in Microsoft SharePoint Server - page 12

Vendor: Microsoft
Software: Microsoft SharePoint Server
Software CPE: cpe:2.3:a:microsoft:microsoft_sharepoint_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 532
Public exploits: 24
Known exploited (KEV): 19
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft SharePoint Server Microsoft SharePoint Server is affected by 532 known vulnerabilities: 4 critical, 122 high, 211 medium, 195 low Critical High Medium Low

Vulnerabilities (532)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU86051 - Permissions, Privileges, and Access Controls
CVE-2021-43876		 CWE-264 Medium
No
No
 - 04.02.2024 SB2021121736
#VU67282 - Improper input validation
CVE-2022-38008		 CWE-20 Medium
No
No
 - 13.09.2022 SB2022091379
#VU64374 - Deserialization of Untrusted Data
CVE-2022-30157		 CWE-502 Medium
No
No
 - 14.06.2022 SB2022061461
#VU64373 - Improper input validation
CVE-2022-30158		 CWE-20 Medium
No
No
 - 14.06.2022 SB2022061461
#VU64283 - Exposure of sensitive information to an unauthorized actor
CVE-2022-30159		 CWE-200 Medium
No
No
 - 14.06.2022 SB2022061426
#VU64281 - Exposure of sensitive information to an unauthorized actor
CVE-2022-30172		 CWE-200 Medium
No
No
 - 14.06.2022 SB2022061426
#VU64280 - Exposure of sensitive information to an unauthorized actor
CVE-2022-30171		 CWE-200 Medium
No
No
 - 14.06.2022 SB2022061426
#VU62963 - Improper input validation
CVE-2022-29108		 CWE-20 Medium
No
No
 - 10.05.2022 SB2022051025
#VU62149 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2022-24472		 CWE-451 Medium
No
No
 - 12.04.2022 SB2022041247
#VU60420 - Exposure of sensitive information to an unauthorized actor
CVE-2022-22716		 CWE-200 Low
No
No
 - 08.02.2022 SB2022020841
#VU60417 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2022-21987		 CWE-451 Medium
No
No
 - 08.02.2022 SB2022020838
#VU60416 - Security Features
CVE-2022-21968		 CWE-254 Low
No
No
 - 08.02.2022 SB2022020838
#VU60410 - Deserialization of Untrusted Data
CVE-2022-22005		 CWE-502 Medium
No
No
 - 08.02.2022 SB2022020838
#VU59476 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-21840		 CWE-94 High
No
No
 - 11.01.2022 SB2022011159
#VU59443 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-21842		 CWE-94 High
No
No
 - 11.01.2022 SB2022011132
#VU59440 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-21837		 CWE-94 Medium
No
No
 - 11.01.2022 SB2022011131
#VU58915 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-43242		 CWE-451 Medium
No
No
 - 14.12.2021 SB2021121449
#VU58914 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-42320		 CWE-451 Medium
No
No
 - 14.12.2021 SB2021121449
#VU58912 - Improper input validation
CVE-2021-42309		 CWE-20 High
No
No
 - 14.12.2021 SB2021121449
#VU58911 - Improper input validation
CVE-2021-42294		 CWE-20 High
No
No
 - 14.12.2021 SB2021121449


Showing elements 221 - 240 out of 532