Known vulnerabilities in Microsoft SharePoint Server - page 27

Vendor: Microsoft

Software: Microsoft SharePoint Server

Software CPE: cpe:2.3:a:microsoft:microsoft_sharepoint_server:*:*:*:*:*:*:*:*

Website: https://www.microsoft.com

Total vulnerabilities: 532

Public exploits: 24

Known exploited (KEV): 19

Highest CVSSv4 Score: 9.4

Vulnerabilities (532)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU5561 - Missing release of memory after effective lifetime CVE-2015-2375	CWE-401	Low	No	No	-	31.01.2017	SB2015071402 SB2015071405
#VU5554 - Memory corruption CVE-2015-2376	CWE-119	High	No	No	-	31.01.2017	SB2015071402 SB2015071405
#VU5465 - Use After Free CVE-2015-1650	CWE-416	High	No	No	-	27.01.2017	SB2015041401 SB2015041402
#VU5464 - Use After Free CVE-2015-1649	CWE-416	High	No	No	-	27.01.2017	SB2015041401 SB2015041402
#VU5463 - Memory corruption CVE-2015-1641	CWE-119	Critical	Available	Exploited	-	27.01.2017	SB2015041401 SB2015041402
#VU5288 - Memory corruption CVE-2015-2468	CWE-119	High	Available	No	-	24.01.2017	SB2015081102
#VU5188 - Memory corruption CVE-2014-1761	CWE-119	Critical	Available	Exploited	-	20.01.2017	SB2014032401
#VU4754 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2013-1289	CWE-79	Medium	No	No	-	16.01.2017	SB2013040901
#VU4236 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2012-2520	CWE-79	Medium	No	No	-	11.01.2017	SB2012100901
#VU3049 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2010-1257	CWE-79	Low	No	No	-	30.12.2016	SB2010060801
#VU3048 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2010-0817	CWE-79	Medium	Available	Exploited	-	30.12.2016	SB2010060801
#VU1370 - Integer overflow CVE-2009-0561	CWE-190	High	No	No	-	16.12.2016	SB2009060902

Showing elements 521 - 540 out of 532