SE
Product
Sharepoint Enterprise Server
On CISA KEVExploited in the wildRansomware-linked
256
CVEs
5
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 5High 128Medium 122Low 1
Watch
Add Sharepoint Enterprise Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-49706 RansomwareIn wildKEV | 6.5 | Jul 8 | Microsoft SharePoint Server Spoofing Vulnerability Affected: 2016 |
| CVE-2023-38177 | 6.8 | Nov 14 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 2016 |
| CVE-2023-24954 | 6.5 | May 9 | Microsoft SharePoint Server Information Disclosure Vulnerability Affected: 2016 |
| CVE-2023-24950 | 6.5 | May 9 | Microsoft SharePoint Server Spoofing Vulnerability Affected: 2016 |
| CVE-2022-41122 | 6.5 | Nov 9 | Microsoft SharePoint Server Spoofing Vulnerability Affected: 2013; 2016 |
| CVE-2020-16953 | 6.5 | Oct 16 | <p>An information disclosure vulnerability exists when Microsoft SharePoint Server fails to properly handle objects in memory Affected: 2016 |
| CVE-2020-16948 | 6.5 | Oct 16 | <p>An information disclosure vulnerability exists when Microsoft SharePoint Server fails to properly handle objects in memory Affected: 2016 |
| CVE-2020-1103 | 6.5 | May 21 | An information disclosure vulnerability exists where certain modes of the search function in Microsoft SharePoint Server are vulnerable to cross-site search attacks (a variant of… Affected: 2016 |
| CVE-2019-1443 | 6.5 | Nov 12 | An information disclosure vulnerability exists in Microsoft SharePoint when an attacker uploads a specially crafted file to the SharePoint Server.An authenticated attacker who… Affected: 2016 |
| CVE-2019-1330 | 6.5 | Oct 10 | An elevation of privilege vulnerability exists in Microsoft SharePoint, aka 'Microsoft SharePoint Elevation of Privilege Vulnerability' Affected: 2016; 2019 |
| CVE-2019-1260 | 6.5 | Sep 11 | An elevation of privilege vulnerability exists in Microsoft SharePoint, aka 'Microsoft SharePoint Elevation of Privilege Vulnerability' Affected: 2016 |
| CVE-2019-0956 | 6.5 | May 16 | An information disclosure vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka… Affected: 2016 |
| CVE-2020-1482 | 6.3 | Sep 11 | <p>A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server Affected: 2016 |
| CVE-2020-1440 | 6.3 | Sep 11 | <p>A tampering vulnerability exists when Microsoft SharePoint Server fails to properly handle profile data Affected: 2013; 2016 |
| CVE-2025-53736 | 6.2 | Aug 12 | Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally Affected: 2016 |
| CVE-2020-1323 | 6.1 | Jun 9 | An open redirect vulnerability exists in Microsoft SharePoint that could lead to spoofing.To exploit the vulnerability, an attacker could send a link that has a specially crafted… Affected: 2016 |
| CVE-2020-1106 | 6.1 | May 21 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server Affected: 2016 |
| CVE-2019-0670 | 6.1 | Mar 5 | A spoofing vulnerability exists in Microsoft SharePoint when the application does not properly parse HTTP content, aka 'Microsoft SharePoint Spoofing Vulnerability' Affected: 2013 |
| CVE-2018-0799 | 6.1 | Jan 10 | Microsoft Access in Microsoft SharePoint Enterprise Server 2013 and Microsoft SharePoint Enterprise Server 2016 allows a cross-site-scripting (XSS) vulnerability due to the way… Affected: 2013; 2016 |
| CVE-2021-43242 | 5.7 | Dec 15 | Microsoft SharePoint Server Spoofing Vulnerability Affected: 2016 |
| CVE-2021-42320 | 5.7 | Dec 15 | Microsoft SharePoint Server Spoofing Vulnerability Affected: 2016 |
| CVE-2022-41103 | 5.5 | Nov 9 | Microsoft Word Information Disclosure Vulnerability Affected: 2013; 2016 |
| CVE-2022-41060 | 5.5 | Nov 9 | Microsoft Word Information Disclosure Vulnerability Affected: 2013; 2016 |
| CVE-2020-1224 | 5.5 | Sep 11 | <p>An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory Affected: 2013 |
| CVE-2020-1573 | 5.5 | Aug 17 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server Affected: 2016 |
| CVE-2020-1505 | 5.5 | Aug 17 | An information disclosure vulnerability exists when Microsoft SharePoint Server fails to properly handle objects in memory Affected: 2016 |
| CVE-2020-1503 | 5.5 | Aug 17 | An information disclosure vulnerability exists when Microsoft Word improperly discloses the contents of its memory Affected: 2013; 2016 |
| CVE-2020-1445 | 5.5 | Jul 14 | An information disclosure vulnerability exists when Microsoft Office improperly discloses the contents of its memory, aka 'Microsoft Office Information Disclosure Vulnerability' Affected: 2013; 2016 |
| CVE-2020-1342 | 5.5 | Jul 14 | An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose the contents of… Affected: 2013; 2016 |
| CVE-2019-1446 | 5.5 | Nov 12 | An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel Information Disclosure Vulnerability' Affected: 2013 |
| CVE-2020-17060 | 5.4 | Nov 11 | Microsoft SharePoint Server Spoofing Vulnerability Affected: 2013; 2016 |
| CVE-2020-1514 | 5.4 | Sep 11 | <p>A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server Affected: 2016 |
| CVE-2020-1227 | 5.4 | Sep 11 | <p>A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server Affected: 2016 |
| CVE-2020-1580 | 5.4 | Aug 17 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server Affected: 2013; 2016 |
| CVE-2020-1501 | 5.4 | Aug 17 | A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server Affected: 2016 |
| CVE-2020-1500 | 5.4 | Aug 17 | A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server Affected: 2013; 2016 |
| CVE-2020-1499 | 5.4 | Aug 17 | A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server Affected: 2013; 2016 |
| CVE-2020-1456 | 5.4 | Jul 14 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka… Affected: 2013; 2016 |
| CVE-2020-1454 | 5.4 | Jul 14 | This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server.An authenticated attacker could exploit… Affected: 2016 |
| CVE-2020-1451 | 5.4 | Jul 14 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka… Affected: 2013; 2016 |
| CVE-2020-1450 | 5.4 | Jul 14 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka… Affected: 2013; 2016 |
| CVE-2020-1443 | 5.4 | Jul 14 | A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft… Affected: 2016 |
| CVE-2020-1320 | 5.4 | Jun 9 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka… Affected: 2016 |
| CVE-2020-1318 | 5.4 | Jun 9 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka… Affected: 2013; 2016 |
| CVE-2020-1298 | 5.4 | Jun 9 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka… Affected: 2016 |
| CVE-2020-1297 | 5.4 | Jun 9 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka… Affected: 2016 |
| CVE-2020-1183 | 5.4 | Jun 9 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka… Affected: 2016 |
| CVE-2020-1177 | 5.4 | Jun 9 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka… Affected: 2016 |
| CVE-2020-1148 | 5.4 | Jun 9 | A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft… Affected: 2013; 2016 |
| CVE-2020-1107 | 5.4 | May 21 | A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server Affected: 2013; 2016 |