Microsoft Sharepoint Enterprise Server 2016 vulnerabilities
335 known vulnerabilities affecting microsoft/microsoft_sharepoint_enterprise_server_2016.
Total CVEs
335
CISA KEV
13
actively exploited
Public exploits
18
Exploited in wild
22
Severity breakdown
CRITICAL11HIGH187MEDIUM130LOW7
Vulnerabilities
Page 15 of 17
CVE-2026-64897P4MEDIUMCVSS 5.4≥ 16.0.0, < 16.0.5565.10012026-08-11
CVE-2026-64897 [MEDIUM] CWE-79 CVE-2026-64897: Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
nvd
CVE-2026-64902P4MEDIUMCVSS 5.4≥ 16.0.0, < 16.0.5565.10012026-08-11
CVE-2026-64902 [MEDIUM] CWE-79 CVE-2026-64902: Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
nvd
CVE-2026-62826P4MEDIUMCVSS 5.4≥ 16.0.0, < 16.0.5561.10012026-07-16
CVE-2026-62826 [MEDIUM] CWE-79 CVE-2026-62826: Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
nvd
CVE-2026-55019P4MEDIUMCVSS 5.4≥ 16.0.0, < 16.0.5561.10012026-07-14
CVE-2026-55019 [MEDIUM] CWE-79 CVE-2026-55019: Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
nvd
CVE-2026-55020P4MEDIUMCVSS 5.4≥ 16.0.0, < 16.0.5561.10012026-07-14
CVE-2026-55020 [MEDIUM] CWE-79 CVE-2026-55020: Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
nvd
CVE-2026-55016P4MEDIUMCVSS 5.4≥ 16.0.0, < 16.0.5561.10012026-07-14
CVE-2026-55016 [MEDIUM] CWE-79 CVE-2026-55016: Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
nvd
CVE-2026-55135P4MEDIUMCVSS 5.4≥ 16.0.0, < 16.0.5561.10012026-07-14
CVE-2026-55135 [MEDIUM] CWE-79 CVE-2026-55135: Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
nvd
CVE-2026-55030P4MEDIUMCVSS 5.4≥ 16.0.0, < 16.0.5561.10012026-07-14
CVE-2026-55030 [MEDIUM] CWE-79 CVE-2026-55030: Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
nvd
CVE-2026-47636P4MEDIUMCVSS 5.4≥ 16.0.0, < 16.0.5556.10052026-06-09
CVE-2026-47636 [MEDIUM] CWE-79 CVE-2026-47636: Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
nvd
CVE-2026-47639P4MEDIUMCVSS 5.4≥ 16.0.0, < 16.0.5556.10052026-06-09
CVE-2026-47639 [MEDIUM] CWE-79 CVE-2026-47639: Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
nvd
CVE-2026-45453P4MEDIUMCVSS 5.4≥ 16.0.0, < 16.0.5556.10052026-06-09
CVE-2026-45453 [MEDIUM] CWE-79 CVE-2026-45453: Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
nvd
CVE-2026-45464P4MEDIUMCVSS 5.4≥ 16.0.0, < 16.0.5556.10052026-06-09
CVE-2026-45464 [MEDIUM] CWE-79 CVE-2026-45464: Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
nvd
CVE-2026-45465P4MEDIUMCVSS 5.4≥ 16.0.0, < 16.0.5556.10052026-06-09
CVE-2026-45465 [MEDIUM] CWE-79 CVE-2026-45465: Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
nvd
CVE-2026-47637P4MEDIUMCVSS 5.4≥ 16.0.0, < 16.0.5556.10052026-06-09
CVE-2026-47637 [MEDIUM] CWE-79 CVE-2026-47637: Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
nvd
CVE-2026-47638P4MEDIUMCVSS 5.4≥ 16.0.0, < 16.0.5556.10052026-06-09
CVE-2026-47638 [MEDIUM] CWE-79 CVE-2026-47638: Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
nvd
CVE-2026-45468P4MEDIUMCVSS 5.4≥ 16.0.0, < 16.0.5556.10052026-06-09
CVE-2026-45468 [MEDIUM] CWE-79 CVE-2026-45468: Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
nvd
CVE-2026-47640P4MEDIUMCVSS 5.4≥ 16.0.0, < 16.0.5556.10052026-06-09
CVE-2026-47640 [MEDIUM] CWE-79 CVE-2026-47640: Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
nvd
CVE-2026-45462P4MEDIUMCVSS 5.4≥ 16.0.0, < 16.0.5556.10052026-06-09
CVE-2026-45462 [MEDIUM] CWE-79 CVE-2026-45462: Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
nvd
CVE-2026-45479P4MEDIUMCVSS 5.4≥ 16.0.0, < 16.0.5556.10052026-06-09
CVE-2026-45479 [MEDIUM] CWE-79 CVE-2026-45479: Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
nvd
CVE-2026-45467P4MEDIUMCVSS 5.4≥ 16.0.0, < 16.0.5556.10052026-06-09
CVE-2026-45467 [MEDIUM] CWE-79 CVE-2026-45467: Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
nvd