Known vulnerabilities in Microsoft SharePoint Server - page 27

Vendor: Microsoft
Software: Microsoft SharePoint Server
Software CPE: cpe:2.3:a:microsoft:microsoft_sharepoint_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 548
Public exploits: 25
Known exploited (KEV): 20
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft SharePoint Server Microsoft SharePoint Server is affected by 548 known vulnerabilities: 4 critical, 122 high, 218 medium, 204 low Critical High Medium Low

Vulnerabilities (548)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU18503 - Memory corruption
CVE-2017-8509		 CWE-119 High
No
No
 - 16.05.2019 SB2017061339
#VU18485 - Memory corruption
CVE-2017-8513		 CWE-119 High
No
No
 - 15.05.2019 SB2017061338
#VU8755 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-11777		 CWE-79 Low
No
No
 - 10.10.2017 SB2017101003
#VU8756 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-11820		 CWE-79 Low
No
No
 - 10.10.2017 SB2017101003
#VU8250 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-8629		 CWE-79 Low
No
No
 - 12.09.2017 SB2017091209
#VU8308 - Memory corruption
CVE-2017-8743		 CWE-119 High
No
No
 - 12.09.2017 SB2017091221
#VU8311 - Memory corruption
CVE-2017-8742		 CWE-119 High
No
No
 - 12.09.2017 SB2017091221
#VU7752 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-8654		 CWE-79 Low
No
No
 - 08.08.2017 SB2017080817
#VU7420 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-8569		 CWE-79 Low
No
No
 - 11.07.2017 SB2017071110
#VU7225 - Memory corruption
CVE-2017-8511		 CWE-119 High
No
No
 - 13.06.2017 SB2017061343
#VU12930 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-8514		 CWE-79 Low
No
No
 - 13.06.2017 SB2017061334
#VU6456 - Memory corruption
CVE-2017-0281		 CWE-119 High
No
No
 - 09.05.2017 SB2017050906
#VU6452 - Memory corruption
CVE-2017-0254		 CWE-119 High
No
No
 - 09.05.2017 SB2017050906
#VU6027 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-0107		 CWE-79 Low
No
No
 - 14.03.2017 SB2017031423
SB20170314164
#VU5561 - Missing release of memory after effective lifetime
CVE-2015-2375		 CWE-401 Low
No
No
 - 31.01.2017 SB2015071402
SB2015071405
#VU5554 - Memory corruption
CVE-2015-2376		 CWE-119 High
No
No
 - 31.01.2017 SB2015071402
SB2015071405
#VU5463 - Memory corruption
CVE-2015-1641		 CWE-119 Critical
Available
Exploited
 - 27.01.2017 SB2015041401
SB2015041402
#VU5288 - Memory corruption
CVE-2015-2468		 CWE-119 High
Available
No
 - 24.01.2017 SB2015081102
#VU4103 - Memory corruption
CVE-2017-0003		 CWE-119 High
No
No
 - 10.01.2017 SB2017011007
SB2017011010
#VU135 - Memory corruption
CVE-2016-3282		 CWE-119 High
No
No
 - 14.07.2016 SB2016071306
SB2016071206
SB2016071228


Showing elements 521 - 540 out of 548