SH
Collaboration
SharePoint
On CISA KEVExploited in the wildRansomware-linked
632
CVEs
20
On KEV
9.9
Max CVSS
38
New 30D
Severity mix
Critical 16High 316Medium 168Low 0
Watch
Add SharePoint to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-45481 | 5.4 | Jun 9 | Microsoft SharePoint Server Spoofing Vulnerability Affected: before 16.0.19725.20384; 2016; 2019 |
| CVE-2026-47640 | 5.4 | Jun 9 | Microsoft SharePoint Server Spoofing Vulnerability Affected: before 16.0.19725.20384; 2016; 2019 |
| CVE-2026-47634 | 5.4 | Jun 9 | Microsoft SharePoint Server Spoofing Vulnerability Affected: before 16.0.19725.20384; 2019 |
| CVE-2026-45465 | 5.4 | Jun 9 | Microsoft SharePoint Server Spoofing Vulnerability Affected: before 16.0.19725.20384; 2016; 2019 |
| CVE-2026-45464 | 5.4 | Jun 9 | Microsoft SharePoint Server Spoofing Vulnerability Affected: before 16.0.19725.20384; 2016; 2019 |
| CVE-2026-45462 | 5.4 | Jun 9 | Microsoft SharePoint Server Spoofing Vulnerability Affected: before 16.0.19725.20384; 2016; 2019 |
| CVE-2026-47641 | 5.4 | Jun 9 | Microsoft SharePoint Server Spoofing Vulnerability Affected: before 16.0.19725.20384; 2016; 2019 |
| CVE-2026-47639 | 5.4 | Jun 9 | Microsoft SharePoint Server Spoofing Vulnerability Affected: before 16.0.19725.20384; 2016; 2019 |
| CVE-2026-47638 | 5.4 | Jun 9 | Microsoft SharePoint Server Spoofing Vulnerability Affected: before 16.0.19725.20384; 2016; 2019 |
| CVE-2026-47637 | 5.4 | Jun 9 | Microsoft SharePoint Server Spoofing Vulnerability Affected: before 16.0.19725.20384; 2016; 2019 |
| CVE-2026-47636 | 5.4 | Jun 9 | Microsoft SharePoint Server Spoofing Vulnerability Affected: before 16.0.19725.20384; 2016; 2019 |
| CVE-2026-45453 | 5.4 | Jun 9 | Microsoft SharePoint Server Spoofing Vulnerability Affected: before 16.0.19725.20384; 2016; 2019 |
| CVE-2026-45483 | 5.4 | Jun 9 | Microsoft Office Project Server Spoofing Vulnerability Affected: before 16.0.19725.20384; 2016; 2019 |
| CVE-2026-45479 | 5.4 | Jun 9 | Microsoft SharePoint Server Spoofing Vulnerability Affected: before 16.0.19725.20384; 2016; 2019 |
| CVE-2026-45468 | 5.4 | Jun 9 | Microsoft SharePoint Server Spoofing Vulnerability Affected: before 16.0.19725.20384; 2016; 2019 |
| CVE-2026-45467 | 5.4 | Jun 9 | Microsoft SharePoint Server Spoofing Vulnerability Affected: before 16.0.19725.20384; 2016; 2019 |
| CVE-2026-20945 | 5.4 | Apr 14 | Microsoft SharePoint Server Spoofing Vulnerability Affected: before 16.0.19725.20210; 2016; 2019 |
| CVE-2026-20958 | 5.4 | Jan 13 | Microsoft SharePoint Information Disclosure Vulnerability Affected: before 16.0.19127.20442; 2016; 2019 |
| CVE-2026-20959 | 5.4 | Jan 13 | Microsoft SharePoint Server Spoofing Vulnerability Affected: before 16.0.19127.20442; 2016; 2019 |
| CVE-2020-17060 | 5.4 | Nov 11 | Microsoft SharePoint Server Spoofing Vulnerability Affected: 2010; 2019 |
| CVE-2020-1514 | 5.4 | Sep 11 | <p>A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server Affected: 2019 |
| CVE-2020-1227 | 5.4 | Sep 11 | <p>A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server Affected: 2019 |
| CVE-2020-1580 | 5.4 | Aug 17 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server Affected: 2010; 2019 |
| CVE-2020-1501 | 5.4 | Aug 17 | A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server Affected: 2010; 2019 |
| CVE-2020-1500 | 5.4 | Aug 17 | A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server Affected: 2010; 2019 |
| CVE-2020-1499 | 5.4 | Aug 17 | A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server Affected: 2019 |
| CVE-2020-1456 | 5.4 | Jul 14 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka… Affected: 2010; 2019 |
| CVE-2020-1454 | 5.4 | Jul 14 | This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server.An authenticated attacker could exploit… Affected: 2019 |
| CVE-2020-1451 | 5.4 | Jul 14 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka… Affected: 2010; 2019 |
| CVE-2020-1450 | 5.4 | Jul 14 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka… Affected: 2010; 2019 |
| CVE-2020-1443 | 5.4 | Jul 14 | A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft… Affected: 2019 |
| CVE-2020-1320 | 5.4 | Jun 9 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka… Affected: 2019 |
| CVE-2020-1318 | 5.4 | Jun 9 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka… Affected: 2019 |
| CVE-2020-1298 | 5.4 | Jun 9 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka… Affected: 2019 |
| CVE-2020-1297 | 5.4 | Jun 9 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka… Affected: 2019 |
| CVE-2020-1183 | 5.4 | Jun 9 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka… Affected: 2019 |
| CVE-2020-1177 | 5.4 | Jun 9 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka… Affected: 2019 |
| CVE-2020-1148 | 5.4 | Jun 9 | A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft… Affected: 2010; 2019 |
| CVE-2020-1107 | 5.4 | May 21 | A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server Affected: 2019 |
| CVE-2020-1105 | 5.4 | May 21 | A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server Affected: 2013 |
| CVE-2020-1104 | 5.4 | May 21 | A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server Affected: 2019 |
| CVE-2020-1101 | 5.4 | May 21 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server Affected: 2019 |
| CVE-2020-1100 | 5.4 | May 21 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server Affected: 2010; 2019 |
| CVE-2020-1099 | 5.4 | May 21 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server Affected: 2019 |
| CVE-2020-0978 | 5.4 | Apr 15 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka… Affected: 2019 |
| CVE-2020-0977 | 5.4 | Apr 15 | A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft… Affected: 2019 |
| CVE-2020-0975 | 5.4 | Apr 15 | A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft… Affected: 2019 |
| CVE-2020-0973 | 5.4 | Apr 15 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka… Affected: 2010; 2019 |
| CVE-2020-0972 | 5.4 | Apr 15 | A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft… Affected: 2019 |
| CVE-2020-0954 | 5.4 | Apr 15 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka… Affected: 2019 |
The 500 most important CVEs for this product (exploited first, then by severity)