Known vulnerabilities in Microsoft SharePoint Server Subscription Edition - page 5

Vendor: Microsoft
Software: Microsoft SharePoint Server Subscription Edition
Software CPE: cpe:2.3:a:microsoft:microsoft_sharepoint_server_subscription_edition:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 163
Public exploits: 4
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft SharePoint Server Subscription Edition Microsoft SharePoint Server Subscription Edition is affected by 163 known vulnerabilities: 23 high, 93 medium, 47 low Critical High Medium Low

Vulnerabilities (163)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU112656 - Improper Authorization
CVE-2025-49701		 CWE-285 Medium
No
No
 16.0.18526.20424 09.07.2025 SB2025070997
#VU112655 - Improper Authentication
CVE-2025-49706		 CWE-287 Medium
No
Exploited
 16.0.18526.20424 09.07.2025 SB2025070997
#VU110710 - Deserialization of Untrusted Data
CVE-2025-47163		 CWE-502 Medium
No
No
 - 10.06.2025 SB2025061069
#VU110709 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-47172		 CWE-89 Medium
No
No
 - 10.06.2025 SB2025061069
#VU110707 - Deserialization of Untrusted Data
CVE-2025-47166		 CWE-502 Medium
No
No
 - 10.06.2025 SB2025061069
#VU109082 - Deserialization of Untrusted Data
CVE-2025-30384		 CWE-502 High
No
No
 - 13.05.2025 SB2025051391
#VU109081 - Improper Privilege Management
CVE-2025-29976		 CWE-269 Low
No
No
 - 13.05.2025 SB2025051391
#VU109080 - Deserialization of Untrusted Data
CVE-2025-30378		 CWE-502 High
No
No
 - 13.05.2025 SB2025051391
#VU109079 - Deserialization of Untrusted Data
CVE-2025-30382		 CWE-502 High
No
No
 - 13.05.2025 SB2025051391
#VU107288 - Deserialization of Untrusted Data
CVE-2025-29793		 CWE-502 Low
No
No
 - 09.04.2025 SB2025040955
#VU107287 - Improper Authorization
CVE-2025-29794		 CWE-285 Medium
No
No
 - 09.04.2025 SB2025040955
#VU103790 - Improper Authorization
CVE-2025-21400		 CWE-285 Medium
No
No
 - 11.02.2025 SB2025021196
#VU102664 - Improper Authorization
CVE-2025-21348		 CWE-285 Low
No
No
 - 14.01.2025 SB2025011454
#VU102662 - Improper input validation
CVE-2025-21344		 CWE-20 High
No
No
 - 14.01.2025 SB2025011454
#VU102660 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-21393		 CWE-79 Low
No
No
 - 14.01.2025 SB2025011454
#VU101442 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-49062		 CWE-22 Medium
No
No
 - 10.12.2024 SB2024121087
#VU101441 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-49064		 CWE-611 Medium
No
No
 - 10.12.2024 SB2024121087
#VU101440 - Deserialization of Untrusted Data
CVE-2024-49070		 CWE-502 High
No
No
 - 10.12.2024 SB2024121087
#VU101439 - Improper Access Control
CVE-2024-49068		 CWE-284 High
No
No
 - 10.12.2024 SB2024121087
#VU98240 - Improper Access Control
CVE-2024-43503		 CWE-284 Low
No
No
 - 09.10.2024 SB2024100907


Showing elements 81 - 100 out of 163