Known vulnerabilities in Microsoft SharePoint Server - page 24

Vendor: Microsoft
Software: Microsoft SharePoint Server
Software CPE: cpe:2.3:a:microsoft:microsoft_sharepoint_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 532
Public exploits: 24
Known exploited (KEV): 19
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft SharePoint Server Microsoft SharePoint Server is affected by 532 known vulnerabilities: 4 critical, 122 high, 211 medium, 195 low Critical High Medium Low

Vulnerabilities (532)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU15246 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-8498		 CWE-79 Low
No
No
 - 09.10.2018 SB2018100918
#VU14776 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-8431		 CWE-79 Low
No
No
 - 13.09.2018 SB2018091302
#VU14775 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-8428		 CWE-79 Medium
No
No
 - 13.09.2018 SB2018091302
#VU14774 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-8426		 CWE-79 Low
No
No
 - 13.09.2018 SB2018091302
#VU14398 - Out-of-bounds read
CVE-2018-8378		 CWE-125 Low
No
No
 - 14.08.2018 SB2018081429
#VU13770 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-8323		 CWE-79 Low
No
No
 - 10.07.2018 SB2018071010
#VU13771 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-8299		 CWE-79 Low
No
No
 - 10.07.2018 SB2018071010
#VU13772 - Improper input validation
CVE-2018-8300		 CWE-20 High
No
No
 - 10.07.2018 SB2018071010
#VU13288 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-8254		 CWE-79 Low
No
No
 - 12.06.2018 SB2018061211
#VU13289 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-8252		 CWE-79 Low
No
No
 - 12.06.2018 SB2018061211
#VU12477 - Memory corruption
CVE-2018-8161		 CWE-119 High
No
No
 - 08.05.2018 SB2018050816
#VU12495 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-8155		 CWE-79 Low
No
No
 - 08.05.2018 SB2018050824
#VU12496 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-8156		 CWE-79 Low
No
No
 - 08.05.2018 SB2018050824
SB2018050825
#VU12497 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-8168		 CWE-79 Low
No
No
 - 08.05.2018 SB2018050824
#VU12498 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-8149		 CWE-79 Low
No
No
 - 08.05.2018 SB2018050824
#VU11708 - Memory corruption
CVE-2018-1028		 CWE-119 High
No
No
 - 10.04.2018 SB2018041024
#VU11734 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-1034		 CWE-79 Low
No
No
 - 10.04.2018 SB2018041032
#VU11736 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-1014		 CWE-79 Low
No
No
 - 10.04.2018 SB2018041032
#VU11737 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-1005		 CWE-79 Low
No
No
 - 10.04.2018 SB2018041032
#VU11738 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-1032		 CWE-79 Low
No
No
 - 10.04.2018 SB2018041032


Showing elements 461 - 480 out of 532