Known vulnerabilities in Microsoft SharePoint Server Subscription Edition - page 8

Vendor: Microsoft
Software: Microsoft SharePoint Server Subscription Edition
Software CPE: cpe:2.3:a:microsoft:microsoft_sharepoint_server_subscription_edition:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 163
Public exploits: 4
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft SharePoint Server Subscription Edition Microsoft SharePoint Server Subscription Edition is affected by 163 known vulnerabilities: 23 high, 93 medium, 47 low Critical High Medium Low

Vulnerabilities (163)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU69086 - Exposure of sensitive information to an unauthorized actor
CVE-2022-41103		 CWE-200 Medium
No
No
 - 08.11.2022 SB2022110818
#VU69085 - Improper input validation
CVE-2022-41061		 CWE-20 High
No
No
 - 08.11.2022 SB2022110818
#VU69069 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2022-41122		 CWE-451 Medium
No
No
 - 08.11.2022 SB2022110807
#VU69068 - Improper input validation
CVE-2022-41062		 CWE-20 Medium
No
No
 - 08.11.2022 SB2022110807
#VU68220 - Improper input validation
CVE-2022-41037		 CWE-20 Medium
No
No
 - 12.10.2022 SB2022101213
#VU68219 - Improper input validation
CVE-2022-41036		 CWE-20 Medium
No
No
 - 12.10.2022 SB2022101213
#VU68218 - Improper input validation
CVE-2022-41038		 CWE-20 Medium
No
No
 - 12.10.2022 SB2022101213
#VU68217 - Improper input validation
CVE-2022-38053		 CWE-20 Medium
No
No
 - 12.10.2022 SB2022101213
#VU67284 - Improper input validation
CVE-2022-37961		 CWE-20 Medium
No
No
 - 13.09.2022 SB2022091379
#VU67283 - Improper input validation
CVE-2022-38009		 CWE-20 Medium
No
No
 - 13.09.2022 SB2022091379
#VU67282 - Improper input validation
CVE-2022-38008		 CWE-20 Medium
No
No
 - 13.09.2022 SB2022091379
#VU67281 - Deserialization of Untrusted Data
CVE-2022-35823		 CWE-502 Medium
No
No
 - 13.09.2022 SB2022091379
#VU64374 - Deserialization of Untrusted Data
CVE-2022-30157		 CWE-502 Medium
No
No
 - 14.06.2022 SB2022061461
#VU64373 - Improper input validation
CVE-2022-30158		 CWE-20 Medium
No
No
 - 14.06.2022 SB2022061461
#VU64283 - Exposure of sensitive information to an unauthorized actor
CVE-2022-30159		 CWE-200 Medium
No
No
 - 14.06.2022 SB2022061426
#VU64281 - Exposure of sensitive information to an unauthorized actor
CVE-2022-30172		 CWE-200 Medium
No
No
 - 14.06.2022 SB2022061426
#VU64280 - Exposure of sensitive information to an unauthorized actor
CVE-2022-30171		 CWE-200 Medium
No
No
 - 14.06.2022 SB2022061426
#VU62963 - Improper input validation
CVE-2022-29108		 CWE-20 Medium
No
No
 - 10.05.2022 SB2022051025
#VU62149 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2022-24472		 CWE-451 Medium
No
No
 - 12.04.2022 SB2022041247
#VU62095 - Use After Free
CVE-2022-26901		 CWE-416 High
No
No
 - 12.04.2022 SB2022041224


Showing elements 141 - 160 out of 163