Known vulnerabilities in Microsoft SharePoint Server - page 14

Vendor: Microsoft
Software CPE: cpe:2.3:a:microsoft:microsoft_sharepoint_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 548
Public exploits: 25
Known exploited (KEV): 20
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft SharePoint Server Microsoft SharePoint Server is affected by 548 known vulnerabilities: 4 critical, 122 high, 218 medium, 204 low Critical High Medium Low

Vulnerabilities (548)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU57248 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-41344
CWE-94 Medium
No
No
- 12.10.2021 SB2021101210
#VU57247 - Exposure of sensitive information to an unauthorized actor
CVE-2021-40482
CWE-200 Medium
No
No
- 12.10.2021 SB2021101210
#VU57246 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-40484
CWE-451 Medium
No
No
- 12.10.2021 SB2021101210
#VU57245 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-40487
CWE-94 Medium
No
No
- 12.10.2021 SB2021101210
#VU56499 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-38651
CWE-451 Medium
No
No
- 14.09.2021 SB2021091416
#VU56498 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-38652
CWE-451 Low
No
No
- 14.09.2021 SB2021091416
#VU55718 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-36940
CWE-451 Medium
No
No
- 10.08.2021 SB2021081029
#VU54755 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-34467
CWE-94 Medium
No
No
- 13.07.2021 SB2021071338
#VU54754 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-34468
CWE-94 Medium
No
No
- 13.07.2021 SB2021071338
#VU54753 - Improper Validation of Integrity Check Value
CVE-2021-34519
CWE-354 Medium
No
No
- 13.07.2021 SB2021071338
#VU54752 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-34520
CWE-94 Medium
No
No
- 13.07.2021 SB2021071338
#VU54751 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-34517
CWE-451 Medium
No
No
- 13.07.2021 SB2021071338
#VU53878 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-31963
CWE-94 Medium
No
No
- 08.06.2021 SB2021060805
#VU53877 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-26420
CWE-94 Medium
No
No
- 08.06.2021 SB2021060805
#VU53876 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-31964
CWE-451 Medium
No
No
- 08.06.2021 SB2021060805
#VU53875 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-31950
CWE-451 Medium
Available
No
- 08.06.2021 SB2021060805
#VU53874 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-31948
CWE-451 Medium
No
No
- 08.06.2021 SB2021060805
#VU53873 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-31966
CWE-94 Low
No
No
- 08.06.2021 SB2021060805
#VU53872 - Exposure of sensitive information to an unauthorized actor
CVE-2021-31965
CWE-200 Medium
No
No
- 08.06.2021 SB2021060805
#VU53075 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-28474
CWE-94 Medium
No
No
- 11.05.2021 SB2021051111


Showing elements 261 - 280 out of 548