Known vulnerabilities in Microsoft SharePoint Server - page 13

Vendor: Microsoft
Software: Microsoft SharePoint Server
Software CPE: cpe:2.3:a:microsoft:microsoft_sharepoint_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 532
Public exploits: 24
Known exploited (KEV): 19
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft SharePoint Server Microsoft SharePoint Server is affected by 532 known vulnerabilities: 4 critical, 122 high, 211 medium, 195 low Critical High Medium Low

Vulnerabilities (532)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU58070 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-40442		 CWE-94 High
No
No
 - 09.11.2021 SB2021110941
#VU57262 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-40485		 CWE-94 High
No
No
 - 12.10.2021 SB2021101217
#VU57261 - Use After Free
CVE-2021-40486		 CWE-416 High
No
No
 - 12.10.2021 SB2021101216
#VU57248 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-41344		 CWE-94 Medium
No
No
 - 12.10.2021 SB2021101210
#VU57247 - Exposure of sensitive information to an unauthorized actor
CVE-2021-40482		 CWE-200 Medium
No
No
 - 12.10.2021 SB2021101210
#VU57246 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-40484		 CWE-451 Medium
No
No
 - 12.10.2021 SB2021101210
#VU57245 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-40487		 CWE-94 Medium
No
No
 - 12.10.2021 SB2021101210
#VU57244 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-40483		 CWE-451 Medium
No
No
 - 12.10.2021 SB2021101210
#VU56499 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-38651		 CWE-451 Medium
No
No
 - 14.09.2021 SB2021091416
#VU56498 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-38652		 CWE-451 Low
No
No
 - 14.09.2021 SB2021091416
#VU55718 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-36940		 CWE-451 Medium
No
No
 - 10.08.2021 SB2021081029
#VU54755 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-34467		 CWE-94 Medium
No
No
 - 13.07.2021 SB2021071338
#VU54754 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-34468		 CWE-94 Medium
No
No
 - 13.07.2021 SB2021071338
#VU54753 - Improper Validation of Integrity Check Value
CVE-2021-34519		 CWE-354 Medium
No
No
 - 13.07.2021 SB2021071338
#VU54752 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-34520		 CWE-94 Medium
No
No
 - 13.07.2021 SB2021071338
#VU54751 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-34517		 CWE-451 Medium
No
No
 - 13.07.2021 SB2021071338
#VU53878 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-31963		 CWE-94 Medium
No
No
 - 08.06.2021 SB2021060805
#VU53877 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-26420		 CWE-94 Medium
No
No
 - 08.06.2021 SB2021060805
#VU53876 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-31964		 CWE-451 Medium
No
No
 - 08.06.2021 SB2021060805
#VU53872 - Exposure of sensitive information to an unauthorized actor
CVE-2021-31965		 CWE-200 Medium
No
No
 - 08.06.2021 SB2021060805


Showing elements 241 - 260 out of 532