Known vulnerabilities in Microsoft SharePoint Server - page 23

Vendor: Microsoft
Software: Microsoft SharePoint Server
Software CPE: cpe:2.3:a:microsoft:microsoft_sharepoint_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 532
Public exploits: 24
Known exploited (KEV): 19
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft SharePoint Server Microsoft SharePoint Server is affected by 532 known vulnerabilities: 4 critical, 122 high, 211 medium, 195 low Critical High Medium Low

Vulnerabilities (532)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU17627 - Improper Control of Generation of Code ('Code Injection')
CVE-2019-0594		 CWE-94 Medium
No
No
 - 13.02.2019 SB2019021307
#VU17626 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2019-0670		 CWE-601 Low
No
No
 - 13.02.2019 SB2019021307
#VU17624 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-0668		 CWE-79 Low
No
No
 - 13.02.2019 SB2019021307
#VU17622 - Improper Control of Generation of Code ('Code Injection')
CVE-2019-0604		 CWE-94 High
Available
Exploited
 - 13.02.2019 SB2019021307
#VU16881 - Memory corruption
CVE-2019-0585		 CWE-119 High
No
No
 - 08.01.2019 SB2019010825
#VU16841 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-0562		 CWE-79 Low
No
No
 - 08.01.2019 SB2019010807
#VU16842 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-0558		 CWE-79 Low
No
No
 - 08.01.2019 SB2019010807
#VU16843 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-0557		 CWE-79 Low
No
No
 - 08.01.2019 SB2019010807
#VU16844 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-0556		 CWE-79 Low
No
No
 - 08.01.2019 SB2019010807
#VU16487 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-8650		 CWE-79 Low
No
No
 - 11.12.2018 SB2018121125
#VU16482 - Memory corruption
CVE-2018-8628		 CWE-119 High
No
No
 - 11.12.2018 SB2018121119
#VU16450 - Cross-Site Request Forgery (CSRF)
CVE-2018-8580		 CWE-352 Low
No
No
 - 11.12.2018 SB2018121104
#VU16449 - Permissions, Privileges, and Access Controls
CVE-2018-8635		 CWE-264 High
No
No
 - 11.12.2018 SB2018121104
#VU15882 - Memory corruption
CVE-2018-8539		 CWE-119 High
No
No
 - 14.11.2018 SB2018111312
SB2018111408
#VU15840 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-8572		 CWE-79 Low
No
No
 - 13.11.2018 SB2018111312
#VU15839 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-8568		 CWE-79 Low
No
No
 - 13.11.2018 SB2018111312
#VU15838 - Exposure of sensitive information to an unauthorized actor
CVE-2018-8578		 CWE-200 Low
No
No
 - 13.11.2018 SB2018111312
#VU15245 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-8518		 CWE-79 Low
No
No
 - 09.10.2018 SB2018100918
SB2022012069
SB2022012550
#VU15244 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-8488		 CWE-79 Low
No
No
 - 09.10.2018 SB2018100918
#VU15243 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-8480		 CWE-79 Low
No
No
 - 09.10.2018 SB2018100918


Showing elements 441 - 460 out of 532