Microsoft Sharepoint Server 2019 vulnerabilities
353 known vulnerabilities affecting microsoft/microsoft_sharepoint_server_2019.
Total CVEs
353
CISA KEV
14
actively exploited
Public exploits
19
Exploited in wild
23
Severity breakdown
CRITICAL13HIGH195MEDIUM138LOW7
Vulnerabilities
Page 14 of 18
CVE-2020-16944P4MEDIUMCVSS 5.4≥ 16.0.0, < publication2020-10-16
CVE-2020-16944 [MEDIUM] CWE-79 CVE-2020-16944: <p>This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafte
This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server.
An authenticated attacker could exploit this vulnerability by sending a specially crafted request to an affected SharePoint server. The attacker who successfully exploited this vulnerability could then perform c
nvd
CVE-2020-1104P4MEDIUMCVSS 5.4≥ 16.0.0, < publication2020-05-21
CVE-2020-1104 [MEDIUM] CWE-79 CVE-2020-1104: A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specia
A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint server.
The attacker who successfully exploited the vulnerability could t
nvd
CVE-2026-55026P4MEDIUMCVSS 5.5≥ 16.0.0, < 16.0.10417.201752026-07-14
CVE-2026-55026 [MEDIUM] CWE-190 CVE-2026-55026: Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to disclose infor
Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to disclose information locally.
nvd
CVE-2021-28450P4MEDIUMCVSS 6.5≥ 16.0.0, < publication2021-04-13
CVE-2021-28450 [MEDIUM] CVE-2021-28450: Microsoft SharePoint Denial of Service Vulnerability
Microsoft SharePoint Denial of Service Vulnerability
nvd
CVE-2020-1573P4MEDIUMCVSS 5.4≥ 16.0.0, < publication2020-08-17
CVE-2020-1573 [MEDIUM] CWE-79 CVE-2020-1573: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint server.
The attacker who successfully exploited the vul
nvd
CVE-2020-1099P4MEDIUMCVSS 5.4≥ 16.0.0, < publication2020-05-21
CVE-2020-1099 [MEDIUM] CWE-79 CVE-2020-1099: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint server.
The attacker who successfully exploited the vul
nvd
CVE-2020-1101P4MEDIUMCVSS 5.4≥ 16.0.0, < publication2020-05-21
CVE-2020-1101 [MEDIUM] CWE-79 CVE-2020-1101: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint server.
The attacker who successfully exploited the vul
nvd
CVE-2020-1100P4MEDIUMCVSS 5.4≥ 16.0.0, < publication2020-05-21
CVE-2020-1100 [MEDIUM] CWE-79 CVE-2020-1100: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint server.
The attacker who successfully exploited the vul
nvd
CVE-2021-34517P4MEDIUMCVSS 5.3≥ 16.0.0, < 16.0.10376.200012021-07-14
CVE-2021-34517 [MEDIUM] CVE-2021-34517: Microsoft SharePoint Server Spoofing Vulnerability
Microsoft SharePoint Server Spoofing Vulnerability
nvd
CVE-2019-1203P4MEDIUMCVSS 5.4≥ 16.0.0, < publication2019-08-14
CVE-2019-1203 [MEDIUM] CWE-79 CVE-2019-1203: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint server.
The attacker who successfully exploited the vul
nvd
CVE-2020-16945P4MEDIUMCVSS 5.4≥ 16.0.0, < publication2020-10-16
CVE-2020-16945 [MEDIUM] CWE-79 CVE-2020-16945: <p>A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not prope
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint server.
The attacker who successfully exploited the v
nvd
CVE-2019-1032P4MEDIUMCVSS 5.4≥ 16.0.0, < publication2019-06-12
CVE-2019-1032 [MEDIUM] CWE-79 CVE-2019-1032: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint server.
The attacker who successfully exploited the vul
nvd
CVE-2019-1033P4MEDIUMCVSS 5.4≥ 16.0.0, < publication2019-06-12
CVE-2019-1033 [MEDIUM] CWE-79 CVE-2019-1033: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint server.
The attacker who successfully exploited the vul
nvd
CVE-2019-1036P4MEDIUMCVSS 5.4≥ 16.0.0, < publication2019-06-12
CVE-2019-1036 [MEDIUM] CWE-79 CVE-2019-1036: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint server.
The attacker who successfully exploited the vul
nvd
CVE-2019-1031P4MEDIUMCVSS 5.4≥ 16.0.0, < publication2019-06-12
CVE-2019-1031 [MEDIUM] CWE-79 CVE-2019-1031: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint server.
The attacker who successfully exploited the vul
nvd
CVE-2020-1514P4MEDIUMCVSS 5.4≥ 16.0.0, < publication2020-09-11
CVE-2020-1514 [MEDIUM] CWE-79 CVE-2020-1514: <p>A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not prope
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint server.
The attacker who successfully exploited the vul
nvd
CVE-2020-1227P4MEDIUMCVSS 5.4≥ 16.0.0, < publication2020-09-11
CVE-2020-1227 [MEDIUM] CWE-79 CVE-2020-1227: <p>A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not prope
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint server.
The attacker who successfully exploited the vul
nvd
CVE-2020-16946P4MEDIUMCVSS 5.4≥ 16.0.0, < publication2020-10-16
CVE-2020-16946 [MEDIUM] CWE-79 CVE-2020-16946: <p>A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not prope
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint server.
The attacker who successfully exploited the v
nvd
CVE-2020-1580P4MEDIUMCVSS 5.4≥ 16.0.0, < publication2020-08-17
CVE-2020-1580 [MEDIUM] CWE-79 CVE-2020-1580: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint server.
The attacker who successfully exploited the vul
nvd
CVE-2020-1107P4MEDIUMCVSS 5.4≥ 16.0.0, < publication2020-05-21
CVE-2020-1107 [MEDIUM] CWE-79 CVE-2020-1107: A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specia
A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint server.
The attacker who successfully exploited the vulnerability could t
nvd