Known vulnerabilities in Microsoft SharePoint Server - page 25

Vendor: Microsoft
Software: Microsoft SharePoint Server
Software CPE: cpe:2.3:a:microsoft:microsoft_sharepoint_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 548
Public exploits: 25
Known exploited (KEV): 20
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft SharePoint Server Microsoft SharePoint Server is affected by 548 known vulnerabilities: 4 critical, 122 high, 218 medium, 204 low Critical High Medium Low

Vulnerabilities (548)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU14398 - Out-of-bounds read
CVE-2018-8378		 CWE-125 Low
No
No
 - 14.08.2018 SB2018081429
#VU13770 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-8323		 CWE-79 Low
No
No
 - 10.07.2018 SB2018071010
#VU13771 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-8299		 CWE-79 Low
No
No
 - 10.07.2018 SB2018071010
#VU13772 - Improper input validation
CVE-2018-8300		 CWE-20 High
No
No
 - 10.07.2018 SB2018071010
#VU13288 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-8254		 CWE-79 Low
No
No
 - 12.06.2018 SB2018061211
#VU13289 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-8252		 CWE-79 Low
No
No
 - 12.06.2018 SB2018061211
#VU12477 - Memory corruption
CVE-2018-8161		 CWE-119 High
No
No
 - 08.05.2018 SB2018050816
#VU12495 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-8155		 CWE-79 Low
No
No
 - 08.05.2018 SB2018050824
#VU12496 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-8156		 CWE-79 Low
No
No
 - 08.05.2018 SB2018050824
SB2018050825
#VU12497 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-8168		 CWE-79 Low
No
No
 - 08.05.2018 SB2018050824
#VU12498 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-8149		 CWE-79 Low
No
No
 - 08.05.2018 SB2018050824
#VU11708 - Memory corruption
CVE-2018-1028		 CWE-119 High
No
No
 - 10.04.2018 SB2018041024
#VU11734 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-1034		 CWE-79 Low
No
No
 - 10.04.2018 SB2018041032
#VU11736 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-1014		 CWE-79 Low
No
No
 - 10.04.2018 SB2018041032
#VU11737 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-1005		 CWE-79 Low
No
No
 - 10.04.2018 SB2018041032
#VU11738 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-1032		 CWE-79 Low
No
No
 - 10.04.2018 SB2018041032
#VU11011 - Permissions, Privileges, and Access Controls
CVE-2018-0947		 CWE-264 Low
No
No
 - 13.03.2018 SB2018031310
SB2018031312
#VU11012 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-0909		 CWE-79 Low
No
No
 - 13.03.2018 SB2018031310
SB2018031312
#VU11053 - Out-of-bounds read
CVE-2018-0919		 CWE-125 Low
No
No
 - 13.03.2018 SB2018031326
#VU11057 - Memory corruption
CVE-2018-0922		 CWE-119 High
No
No
 - 13.03.2018 SB2018031326


Showing elements 481 - 500 out of 548