SE
Product
Sharepoint Enterprise Server
On CISA KEVExploited in the wildRansomware-linked
256
CVEs
5
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 5High 128Medium 122Low 1
Watch
Add Sharepoint Enterprise Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-0924 | 5.4 | Apr 15 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka… Affected: 2016 |
| CVE-2020-0923 | 5.4 | Apr 15 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka… Affected: 2013; 2016 |
| CVE-2020-0894 | 5.4 | Mar 12 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka… Affected: 2016 |
| CVE-2020-0893 | 5.4 | Mar 12 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka… Affected: 2013; 2016 |
| CVE-2020-0891 | 5.4 | Mar 12 | This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server.An authenticated attacker could exploit… Affected: 2016 |
| CVE-2020-0795 | 5.4 | Mar 12 | This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server.An authenticated attacker could exploit… Affected: 2016 |
| CVE-2020-0694 | 5.4 | Feb 11 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka… Affected: 2013; 2016; 2019 |
| CVE-2020-0693 | 5.4 | Feb 11 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka… Affected: 2013; 2016; 2019 |
| CVE-2019-1329 | 5.4 | Oct 10 | An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka… Affected: 2016 |
| CVE-2019-1328 | 5.4 | Oct 10 | A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft… Affected: 2016 |
| CVE-2019-1070 | 5.4 | Oct 10 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka… Affected: 2013; 2016 |
| CVE-2019-1203 | 5.4 | Aug 14 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server Affected: 2013; 2016 |
| CVE-2019-1134 | 5.4 | Jul 15 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka… Affected: 2013; 2016 |
| CVE-2019-1036 | 5.4 | Jun 12 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server Affected: 2016 |
| CVE-2019-1033 | 5.4 | Jun 12 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server Affected: 2016 |
| CVE-2019-1032 | 5.4 | Jun 12 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server Affected: 2016 |
| CVE-2019-1031 | 5.4 | Jun 12 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server Affected: 2016 |
| CVE-2019-0831 | 5.4 | Apr 9 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka… Affected: 2013; 2016 |
| CVE-2019-0830 | 5.4 | Apr 9 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka… Affected: 2016 |
| CVE-2019-0778 | 5.4 | Apr 9 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka… Affected: 2016 |
| CVE-2019-0562 | 5.4 | Jan 8 | An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka… Affected: 2013; 2016 |
| CVE-2018-8650 | 5.4 | Dec 12 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka… Affected: 2016 |
| CVE-2018-8572 | 5.4 | Nov 14 | An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka… Affected: 2016 |
| CVE-2018-8568 | 5.4 | Nov 14 | An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka… Affected: 2016 |
| CVE-2018-8518 | 5.4 | Oct 10 | An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka… Affected: 2013; 2016 |
| CVE-2018-8498 | 5.4 | Oct 10 | An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka… Affected: 2013; 2016 |
| CVE-2018-8488 | 5.4 | Oct 10 | An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka… Affected: 2013; 2016 |
| CVE-2018-8431 | 5.4 | Sep 13 | An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka… Affected: 2013; 2016 |
| CVE-2018-8428 | 5.4 | Sep 13 | An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka… Affected: 2013; 2016 |
| CVE-2018-8323 | 5.4 | Jul 11 | An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka… Affected: 2013; 2016 |
| CVE-2018-8299 | 5.4 | Jul 11 | An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka… Affected: 2013; 2016 |
| CVE-2018-1034 | 5.4 | Apr 12 | An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka… Affected: 2016 |
| CVE-2018-1032 | 5.4 | Apr 12 | An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka… Affected: 2010; 2013; 2016 |
| CVE-2018-1014 | 5.4 | Apr 12 | An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka… Affected: 2013; 2016 |
| CVE-2018-1005 | 5.4 | Apr 12 | An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka… Affected: 2013; 2016 |
| CVE-2018-0869 | 5.4 | Feb 15 | SharePoint Server 2016 allows an elevation of privilege vulnerability due to how web requests are handled, aka "Microsoft SharePoint Elevation of Privilege Vulnerability" Affected: 2016 |
| CVE-2017-11820 | 5.4 | Oct 13 | Microsoft SharePoint Enterprise Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an attacker to exploit a cross-site scripting (XSS) vulnerability by sending… Affected: 2013; 2016 |
| CVE-2017-11777 | 5.4 | Oct 13 | Microsoft SharePoint Enterprise Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an attacker to exploit a cross-site scripting (XSS) vulnerability by sending… Affected: 2013; 2016 |
| CVE-2017-11775 | 5.4 | Oct 13 | Microsoft SharePoint Enterprise Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an attacker to exploit a cross-site scripting (XSS) vulnerability by sending… Affected: 2013; 2016 |
| CVE-2017-8514 | 5.4 | Jun 15 | An information disclosure vulnerability exists when Microsoft SharePoint software fails to properly sanitize a specially crafted requests, aka "Microsoft SharePoint Reflective XSS… Affected: 2016 |
| CVE-2021-27052 | 5.3 | Mar 11 | Microsoft SharePoint Server Information Disclosure Vulnerability Affected: 2016 |
| CVE-2021-24071 | 5.3 | Feb 25 | Microsoft SharePoint Information Disclosure Vulnerability Affected: 2016 |
| CVE-2020-17017 | 5.3 | Nov 11 | Microsoft SharePoint Information Disclosure Vulnerability Affected: 2016 |
| CVE-2020-16979 | 5.3 | Nov 11 | Microsoft SharePoint Information Disclosure Vulnerability Affected: 2016 |
| CVE-2021-24104 | 4.6 | Mar 11 | Microsoft SharePoint Server Spoofing Vulnerability Affected: 2016 |
| CVE-2021-1717 | 4.6 | Jan 12 | Microsoft SharePoint Server Spoofing Vulnerability Affected: 2016 |
| CVE-2021-1641 | 4.6 | Jan 12 | Microsoft SharePoint Server Spoofing Vulnerability Affected: 2016 |
| CVE-2020-1205 | 4.6 | Sep 11 | <p>A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server Affected: 2016 |
| CVE-2019-1202 | 4.4 | Aug 14 | An information disclosure vulnerability exists in the way Microsoft SharePoint handles session objects Affected: 2016 |
| CVE-2022-21968 | 4.3 | Feb 9 | Microsoft SharePoint Server Security Feature Bypass Vulnerability Affected: 2016 |