Known vulnerabilities in Microsoft SharePoint Server - page 17

Vendor: Microsoft
Software: Microsoft SharePoint Server
Software CPE: cpe:2.3:a:microsoft:microsoft_sharepoint_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 532
Public exploits: 24
Known exploited (KEV): 19
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft SharePoint Server Microsoft SharePoint Server is affected by 532 known vulnerabilities: 4 critical, 122 high, 211 medium, 195 low Critical High Medium Low

Vulnerabilities (532)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU46402 - Improper input validation
CVE-2020-1210		 CWE-20 Medium
No
No
 - 08.09.2020 SB2020090815
#VU46400 - Improper input validation
CVE-2020-1440		 CWE-20 Medium
No
No
 - 08.09.2020 SB2020090815
#VU46399 - Improper input validation
CVE-2020-1523		 CWE-20 Medium
No
No
 - 08.09.2020 SB2020090815
#VU46398 - Improper input validation
CVE-2020-1595		 CWE-20 Medium
No
No
 - 08.09.2020 SB2020090815
#VU46392 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-1345		 CWE-79 Low
No
No
 - 08.09.2020 SB2020090809
#VU46390 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-1198		 CWE-79 Low
No
No
 - 08.09.2020 SB2020090809
#VU46389 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-1227		 CWE-79 Low
No
No
 - 08.09.2020 SB2020090809
#VU46388 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-1482		 CWE-79 Low
No
No
 - 08.09.2020 SB2020090809
#VU46387 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-1514		 CWE-79 Low
No
No
 - 08.09.2020 SB2020090809
#VU45548 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-1573		 CWE-79 Medium
No
No
 - 11.08.2020 SB2020081121
#VU45547 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-1580		 CWE-79 Medium
No
No
 - 11.08.2020 SB2020081121
#VU45546 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-1499		 CWE-79 Low
No
No
 - 11.08.2020 SB2020081121
#VU45545 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-1500		 CWE-79 Low
No
No
 - 11.08.2020 SB2020081121
#VU45544 - Out-of-bounds read
CVE-2020-1505		 CWE-125 Medium
No
No
 - 11.08.2020 SB2020081121
#VU45543 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-1501		 CWE-79 Low
No
No
 - 11.08.2020 SB2020081121
#VU45533 - Out-of-bounds read
CVE-2020-1583		 CWE-125 Low
No
No
 - 11.08.2020 SB2020081117
#VU45532 - Out-of-bounds read
CVE-2020-1503		 CWE-125 Low
No
No
 - 11.08.2020 SB2020081117
#VU45531 - Out-of-bounds read
CVE-2020-1502		 CWE-125 Low
No
No
 - 11.08.2020 SB2020081117
#VU45525 - Memory corruption
CVE-2020-1495		 CWE-119 High
No
No
 - 11.08.2020 SB2020081116
#VU29836 - XML Injection
CVE-2020-1147		 CWE-91 High
Available
Exploited
 - 14.07.2020 SB2020071463
SB20200716119
SB20200716120
and 6 more


Showing elements 321 - 340 out of 532