Known vulnerabilities in Microsoft SharePoint Server - page 15

Vendor: Microsoft
Software: Microsoft SharePoint Server
Software CPE: cpe:2.3:a:microsoft:microsoft_sharepoint_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 532
Public exploits: 24
Known exploited (KEV): 19
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft SharePoint Server Microsoft SharePoint Server is affected by 532 known vulnerabilities: 4 critical, 122 high, 211 medium, 195 low Critical High Medium Low

Vulnerabilities (532)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU49431 - Improper input validation
CVE-2021-1716		 CWE-20 High
No
No
 - 12.01.2021 SB2021011228
#VU49429 - Improper input validation
CVE-2021-1714		 CWE-20 High
No
No
 - 12.01.2021 SB2021011227
#VU49400 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-1641		 CWE-451 Medium
No
No
 - 12.01.2021 SB2021011211
#VU49399 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-1717		 CWE-451 Medium
No
No
 - 12.01.2021 SB2021011211
#VU49398 - Permissions, Privileges, and Access Controls
CVE-2021-1719		 CWE-264 Medium
No
No
 - 12.01.2021 SB2021011211
#VU49397 - Permissions, Privileges, and Access Controls
CVE-2021-1712		 CWE-264 Medium
No
No
 - 12.01.2021 SB2021011211
#VU49395 - Improper input validation
CVE-2021-1707		 CWE-20 Medium
No
No
 - 12.01.2021 SB2021011211
#VU48843 - Memory corruption
CVE-2020-17122		 CWE-119 High
No
No
 - 08.12.2020 SB2020120818
#VU48841 - Permissions, Privileges, and Access Controls
CVE-2020-17089		 CWE-264 Medium
No
No
 - 08.12.2020 SB2020120817
#VU48839 - Improper input validation
CVE-2020-17118		 CWE-20 High
No
No
 - 08.12.2020 SB2020120817
#VU48838 - Exposure of sensitive information to an unauthorized actor
CVE-2020-17120		 CWE-200 Medium
No
No
 - 08.12.2020 SB2020120817
#VU48837 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2020-17115		 CWE-451 Medium
No
No
 - 08.12.2020 SB2020120817
#VU48836 - Improper input validation
CVE-2020-17121		 CWE-20 Medium
No
No
 - 08.12.2020 SB2020120817
#VU48304 - Exposure of sensitive information to an unauthorized actor
CVE-2020-16979		 CWE-200 Medium
No
No
 - 10.11.2020 SB2020111044
#VU48303 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-17061		 CWE-94 Medium
No
No
 - 10.11.2020 SB2020111044
#VU48302 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2020-17060		 CWE-451 Medium
No
No
 - 10.11.2020 SB2020111044
#VU48301 - Exposure of sensitive information to an unauthorized actor
CVE-2020-17017		 CWE-200 Medium
Available
No
 - 10.11.2020 SB2020111044
#VU48300 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2020-17016		 CWE-451 Medium
No
No
 - 10.11.2020 SB2020111044
#VU48299 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2020-17015		 CWE-451 Low
No
No
 - 10.11.2020 SB2020111044
#VU47583 - Memory corruption
CVE-2020-16929		 CWE-119 High
No
No
 - 13.10.2020 SB2020101337


Showing elements 281 - 300 out of 532