SE
Product
Sharepoint Enterprise Server
On CISA KEVExploited in the wildRansomware-linked
256
CVEs
5
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 5High 128Medium 122Low 1
Watch
Add Sharepoint Enterprise Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-1147 In wildKEV | 7.8 | Jul 14 | Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability Affected: 2013; 2016 |
| CVE-2017-11826 In wildKEV | 7.8 | Oct 13 | Microsoft Office Remote Code Execution Vulnerability Affected: 2016 |
| CVE-2023-24955 RansomwareIn wildKEV | 7.2 | May 9 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 2016 |
| CVE-2025-47172 | 8.8 | Jun 10 | Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network Affected: 2016 |
| CVE-2025-47166 | 8.8 | Jun 10 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network Affected: 2016 |
| CVE-2025-47163 | 8.8 | Jun 10 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network Affected: 2016 |
| CVE-2025-29794 | 8.8 | Apr 8 | Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network Affected: 2016 |
| CVE-2023-21717 | 8.8 | Feb 14 | Microsoft SharePoint Server Elevation of Privilege Vulnerability Affected: 2013; 2016 |
| CVE-2022-44693 | 8.8 | Dec 13 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 2013; 2016 |
| CVE-2022-41062 | 8.8 | Nov 9 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 2013; 2016 |
| CVE-2022-38053 | 8.8 | Oct 11 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 2013; 2016 |
| CVE-2022-38009 | 8.8 | Sep 13 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 2013; 2016 |
| CVE-2022-38008 | 8.8 | Sep 13 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 2013; 2016 |
| CVE-2022-37961 | 8.8 | Sep 13 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 2013; 2016 |
| CVE-2022-35823 | 8.8 | Sep 13 | Microsoft SharePoint Remote Code Execution Vulnerability Affected: 2013; 2016 |
| CVE-2022-29108 | 8.8 | May 10 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 2016 |
| CVE-2022-22005 | 8.8 | Feb 9 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 2016 |
| CVE-2022-21840 | 8.8 | Jan 11 | Microsoft Office Remote Code Execution Vulnerability Affected: 2013 |
| CVE-2021-43876 | 8.8 | Dec 29 | Microsoft SharePoint Elevation of Privilege Vulnerability Affected: 2013; 2016 |
| CVE-2021-42309 | 8.8 | Dec 15 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 2016 |
| CVE-2021-31181 | 8.8 | May 11 | Microsoft SharePoint Remote Code Execution Vulnerability Affected: 2016 |
| CVE-2021-24072 | 8.8 | Feb 25 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 2016 |
| CVE-2021-24066 | 8.8 | Feb 25 | Microsoft SharePoint Remote Code Execution Vulnerability Affected: 2016 |
| CVE-2021-1707 | 8.8 | Jan 12 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 2016 |
| CVE-2020-1583 | 8.8 | Aug 17 | An information disclosure vulnerability exists when Microsoft Word improperly discloses the contents of its memory Affected: 2013; 2016 |
| CVE-2020-1495 | 8.8 | Aug 17 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory Affected: 2013 |
| CVE-2020-1448 | 8.8 | Jul 14 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution… Affected: 2016 |
| CVE-2020-1447 | 8.8 | Jul 14 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution… Affected: 2013; 2016 |
| CVE-2020-1446 | 8.8 | Jul 14 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution… Affected: 2013; 2016 |
| CVE-2020-1439 | 8.8 | Jul 14 | A remote code execution vulnerability exists in PerformancePoint Services for SharePoint Server when the software fails to check the source markup of XML file input, aka… Affected: 2013; 2016 |
| CVE-2020-1295 | 8.8 | Jun 9 | An elevation of privilege vulnerability exists in Microsoft SharePoint, aka 'Microsoft SharePoint Elevation of Privilege Vulnerability' Affected: 2013; 2016 |
| CVE-2020-1181 | 8.8 | Jun 9 | A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net web controls, aka 'Microsoft SharePoint… Affected: 2016 |
| CVE-2020-1178 | 8.8 | Jun 9 | An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted authentication request to an affected SharePoint… Affected: 2013; 2016 |
| CVE-2020-1102 | 8.8 | May 21 | A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package Affected: 2016 |
| CVE-2020-1069 | 8.8 | May 21 | A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net web controls Affected: 2016 |
| CVE-2020-1024 | 8.8 | May 21 | A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package Affected: 2016 |
| CVE-2020-1023 | 8.8 | May 21 | A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package Affected: 2016 |
| CVE-2020-0974 | 8.8 | Apr 15 | A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote… Affected: 2016 |
| CVE-2020-0971 | 8.8 | Apr 15 | A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote… Affected: 2016 |
| CVE-2020-0932 | 8.8 | Apr 15 | A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote… Affected: 2016 |
| CVE-2020-0931 | 8.8 | Apr 15 | A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote… Affected: 2013; 2016 |
| CVE-2020-0929 | 8.8 | Apr 15 | A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote… Affected: 2016 |
| CVE-2020-0920 | 8.8 | Apr 15 | A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote… Affected: 2016 |
| CVE-2020-0850 | 8.8 | Mar 12 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution… Affected: 2013; 2016 |
| CVE-2019-1296 | 8.8 | Sep 11 | A remote code execution vulnerability exists in Microsoft SharePoint where APIs aren't properly protected from unsafe data input, aka 'Microsoft SharePoint Remote Code Execution… Affected: 2016 |
| CVE-2019-1295 | 8.8 | Sep 11 | A remote code execution vulnerability exists in Microsoft SharePoint where APIs aren't properly protected from unsafe data input, aka 'Microsoft SharePoint Remote Code Execution… Affected: 2016 |
| CVE-2019-1261 | 8.8 | Sep 11 | A spoofing vulnerability exists in Microsoft SharePoint when it improperly handles requests to authorize applications, resulting in cross-site request forgery (CSRF).To exploit… Affected: 2016 |
| CVE-2019-1257 | 8.8 | Sep 11 | A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote… Affected: 2016 |
| CVE-2019-0957 | 8.8 | May 16 | An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka… Affected: 2016 |
| CVE-2019-0952 | 8.8 | May 16 | A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net web controls, aka 'Microsoft SharePoint… Affected: 2016 |