Known vulnerabilities in Microsoft SharePoint Server - page 6

Vendor: Microsoft
Software: Microsoft SharePoint Server
Software CPE: cpe:2.3:a:microsoft:microsoft_sharepoint_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 548
Public exploits: 25
Known exploited (KEV): 20
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft SharePoint Server Microsoft SharePoint Server is affected by 548 known vulnerabilities: 4 critical, 122 high, 218 medium, 204 low Critical High Medium Low

Vulnerabilities (548)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU134154 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-47634		 CWE-79 Low
No
No
 16.0.10417.20153 09.06.2026 SB2026060973
#VU134152 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-45465		 CWE-79 Low
No
No
 16.0.10417.20153 09.06.2026 SB2026060973
#VU134150 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-45464		 CWE-79 Low
No
No
 16.0.10417.20153 09.06.2026 SB2026060973
#VU134149 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-45462		 CWE-79 Low
No
No
 16.0.10417.20153 09.06.2026 SB2026060973
#VU134148 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-33113		 CWE-79 Low
No
No
 16.0.10417.20153 09.06.2026 SB2026060973
#VU134146 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-47641		 CWE-79 Low
No
No
 16.0.10417.20153 09.06.2026 SB2026060973
#VU134145 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-47639		 CWE-79 Low
No
No
 16.0.10417.20153 09.06.2026 SB2026060973
#VU134143 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-47638		 CWE-79 Low
No
No
 16.0.10417.20153 09.06.2026 SB2026060973
#VU134142 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-47637		 CWE-79 Low
No
No
 16.0.10417.20153 09.06.2026 SB2026060973
#VU134141 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-47636		 CWE-79 Low
No
No
 16.0.10417.20153 09.06.2026 SB2026060973
#VU134140 - Improper Authorization
CVE-2026-47298		 CWE-285 Medium
No
No
 16.0.10417.20153 09.06.2026 SB2026060973
#VU134122 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-45453		 CWE-79 Low
No
No
 16.0.10417.20153 09.06.2026 SB2026060973
#VU134121 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-45479		 CWE-79 Low
No
No
 16.0.10417.20153 09.06.2026 SB2026060973
#VU134120 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-45468		 CWE-79 Low
No
No
 16.0.10417.20153 09.06.2026 SB2026060973
#VU132363 - Deserialization of Untrusted Data
CVE-2026-45659		 CWE-502 High
No
Exploited
 16.0.10417.20128, 16.0.19725.20280 27.05.2026 SB2026052737
#VU131348 - Untrusted Pointer Dereference
CVE-2026-40367		 CWE-822 High
No
No
 16.0.10417.20128 13.05.2026 SB2026051382
#VU131345 - Deserialization of Untrusted Data
CVE-2026-40357		 CWE-502 Medium
No
No
 16.0.10417.20128 13.05.2026 SB2026051368
#VU131344 - Deserialization of Untrusted Data
CVE-2026-33112		 CWE-502 Medium
No
No
 16.0.10417.20128 13.05.2026 SB2026051368
#VU131343 - Deserialization of Untrusted Data
CVE-2026-33110		 CWE-502 Medium
No
No
 16.0.10417.20128 13.05.2026 SB2026051368
#VU131340 - Insufficient Granularity of Access Control
CVE-2026-40365		 CWE-1220 Medium
No
No
 16.0.10417.20128 13.05.2026 SB2026051368


Showing elements 101 - 120 out of 548