Known vulnerabilities in Microsoft SharePoint Server - page 9

Vendor: Microsoft
Software: Microsoft SharePoint Server
Software CPE: cpe:2.3:a:microsoft:microsoft_sharepoint_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 532
Public exploits: 24
Known exploited (KEV): 19
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft SharePoint Server Microsoft SharePoint Server is affected by 532 known vulnerabilities: 4 critical, 122 high, 211 medium, 195 low Critical High Medium Low

Vulnerabilities (532)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU102664 - Improper Authorization
CVE-2025-21348		 CWE-285 Low
No
No
 - 14.01.2025 SB2025011454
#VU102662 - Improper input validation
CVE-2025-21344		 CWE-20 High
No
No
 - 14.01.2025 SB2025011454
#VU101593 - Out-of-bounds read
CVE-2024-49065		 CWE-125 Medium
No
No
 - 10.12.2024 SB20241210110
#VU101442 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-49062		 CWE-22 Medium
No
No
 - 10.12.2024 SB2024121087
#VU101441 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-49064		 CWE-611 Medium
No
No
 - 10.12.2024 SB2024121087
#VU101440 - Deserialization of Untrusted Data
CVE-2024-49070		 CWE-502 High
No
No
 - 10.12.2024 SB2024121087
#VU101439 - Improper Access Control
CVE-2024-49068		 CWE-284 High
No
No
 - 10.12.2024 SB2024121087
#VU98240 - Improper Access Control
CVE-2024-43503		 CWE-284 Low
No
No
 - 09.10.2024 SB2024100907
#VU97030 - Command injection
CVE-2024-38227		 CWE-77 Low
No
No
 - 10.09.2024 SB20240910102
#VU97029 - Deserialization of Untrusted Data
CVE-2024-38018		 CWE-502 Medium
No
No
 - 10.09.2024 SB20240910102
#VU97028 - Deserialization of Untrusted Data
CVE-2024-43464		 CWE-502 Low
No
No
 - 10.09.2024 SB20240910102
#VU97027 - Command injection
CVE-2024-38228		 CWE-77 Low
No
No
 - 10.09.2024 SB20240910102
#VU97026 - Deserialization of Untrusted Data
CVE-2024-43466		 CWE-502 Medium
No
No
 - 10.09.2024 SB20240910102
#VU93998 - Deserialization of Untrusted Data
CVE-2024-38094		 CWE-502 Low
No
Exploited
 - 09.07.2024 SB20240709105
#VU93954 - Deserialization of Untrusted Data
CVE-2024-38024		 CWE-502 Low
No
No
 - 09.07.2024 SB2024070999
#VU93953 - Deserialization of Untrusted Data
CVE-2024-38023		 CWE-502 Low
No
No
 - 09.07.2024 SB2024070999
#VU93952 - Server-Side Request Forgery (SSRF)
CVE-2024-32987		 CWE-918 Medium
No
No
 - 09.07.2024 SB2024070999
#VU91698 - Untrusted Search Path
CVE-2024-30100		 CWE-426 High
No
No
 - 11.06.2024 SB20240611227
#VU89452 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-30043		 CWE-611 Medium
Available
No
 - 14.05.2024 SB2024051442
#VU89451 - Deserialization of Untrusted Data
CVE-2024-30044		 CWE-502 Medium
No
No
 - 14.05.2024 SB2024051442


Showing elements 161 - 180 out of 532