Known vulnerabilities in Microsoft SharePoint Server - page 5

Vendor: Microsoft
Software: Microsoft SharePoint Server
Software CPE: cpe:2.3:a:microsoft:microsoft_sharepoint_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 532
Public exploits: 24
Known exploited (KEV): 19
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft SharePoint Server Microsoft SharePoint Server is affected by 532 known vulnerabilities: 4 critical, 122 high, 211 medium, 195 low Critical High Medium Low

Vulnerabilities (532)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU134158 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-48562		 CWE-79 Low
No
No
 16.0.10417.20153 09.06.2026 SB2026060973
#VU134157 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-48560		 CWE-79 Low
No
No
 16.0.10417.20153 09.06.2026 SB2026060973
#VU134156 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-45481		 CWE-79 Low
No
No
 16.0.10417.20153 09.06.2026 SB2026060973
#VU134155 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-47640		 CWE-79 Low
No
No
 16.0.10417.20153 09.06.2026 SB2026060973
#VU134154 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-47634		 CWE-79 Low
No
No
 16.0.10417.20153 09.06.2026 SB2026060973
#VU134152 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-45465		 CWE-79 Low
No
No
 16.0.10417.20153 09.06.2026 SB2026060973
#VU134150 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-45464		 CWE-79 Low
No
No
 16.0.10417.20153 09.06.2026 SB2026060973
#VU134149 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-45462		 CWE-79 Low
No
No
 16.0.10417.20153 09.06.2026 SB2026060973
#VU134148 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-33113		 CWE-79 Low
No
No
 16.0.10417.20153 09.06.2026 SB2026060973
#VU134146 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-47641		 CWE-79 Low
No
No
 16.0.10417.20153 09.06.2026 SB2026060973
#VU134145 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-47639		 CWE-79 Low
No
No
 16.0.10417.20153 09.06.2026 SB2026060973
#VU134143 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-47638		 CWE-79 Low
No
No
 16.0.10417.20153 09.06.2026 SB2026060973
#VU134142 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-47637		 CWE-79 Low
No
No
 16.0.10417.20153 09.06.2026 SB2026060973
#VU134141 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-47636		 CWE-79 Low
No
No
 16.0.10417.20153 09.06.2026 SB2026060973
#VU134140 - Improper Authorization
CVE-2026-47298		 CWE-285 Medium
No
No
 16.0.10417.20153 09.06.2026 SB2026060973
#VU134122 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-45453		 CWE-79 Low
No
No
 16.0.10417.20153 09.06.2026 SB2026060973
#VU134121 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-45479		 CWE-79 Low
No
No
 16.0.10417.20153 09.06.2026 SB2026060973
#VU134120 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-45468		 CWE-79 Low
No
No
 16.0.10417.20153 09.06.2026 SB2026060973
#VU132363 - Deserialization of Untrusted Data
CVE-2026-45659		 CWE-502 High
No
Exploited
 16.0.10417.20128, 16.0.19725.20280 27.05.2026 SB2026052737
#VU131348 - Untrusted Pointer Dereference
CVE-2026-40367		 CWE-822 High
No
No
 16.0.10417.20128 13.05.2026 SB2026051382


Showing elements 81 - 100 out of 532