Microsoft Sharepoint Enterprise Server vulnerabilities
256 known vulnerabilities affecting microsoft/sharepoint_enterprise_server.
Total CVEs
256
CISA KEV
5
actively exploited
Public exploits
9
Exploited in wild
8
Severity breakdown
CRITICAL3HIGH120MEDIUM129LOW4
Vulnerabilities
Page 10 of 13
CVE-2020-1514P4MEDIUMCVSS 5.4v20162020-09-11
CVE-2020-1514 [MEDIUM] CWE-79 CVE-2020-1514: <p>A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not prope
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint server.
The attacker who successfully exploited the vul
nvd
CVE-2020-1227P4MEDIUMCVSS 5.4v20162020-09-11
CVE-2020-1227 [MEDIUM] CWE-79 CVE-2020-1227: <p>A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not prope
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint server.
The attacker who successfully exploited the vul
nvd
CVE-2020-16946P4MEDIUMCVSS 5.4v20162020-10-16
CVE-2020-16946 [MEDIUM] CWE-79 CVE-2020-16946: <p>A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not prope
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint server.
The attacker who successfully exploited the v
nvd
CVE-2020-1580P4MEDIUMCVSS 5.4v2013v20162020-08-17
CVE-2020-1580 [MEDIUM] CWE-79 CVE-2020-1580: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint server.
The attacker who successfully exploited the vul
nvd
CVE-2020-1107P4MEDIUMCVSS 5.4v2013-sp1v20162020-05-21
CVE-2020-1107 [MEDIUM] CWE-79 CVE-2020-1107: A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specia
A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint server.
The attacker who successfully exploited the vulnerability could t
nvd
CVE-2019-0670P4MEDIUMCVSS 6.1v20132019-03-05
CVE-2019-0670 [MEDIUM] CWE-20 CVE-2019-0670: A spoofing vulnerability exists in Microsoft SharePoint when the application does not properly parse
A spoofing vulnerability exists in Microsoft SharePoint when the application does not properly parse HTTP content, aka 'Microsoft SharePoint Spoofing Vulnerability'.
nvd
CVE-2018-8488P4MEDIUMCVSS 5.4v2013-sp1v20162018-10-10
CVE-2018-8488 [MEDIUM] CVE-2018-8488: An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sa
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint. This CVE ID is unique from CVE-2018-8480, CVE-2018-8498, CVE-2018-8518.
nvd
CVE-2018-8498P4MEDIUMCVSS 5.4v2013-sp1v20162018-10-10
CVE-2018-8498 [MEDIUM] CVE-2018-8498: An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sa
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint. This CVE ID is unique from CVE-2018-8480, CVE-2018-8488, CVE-2018-8518.
nvd
CVE-2018-1034P4MEDIUMCVSS 5.4v20162018-04-12
CVE-2018-1034 [MEDIUM] CVE-2018-1034: An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sa
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint. This CVE ID is unique from CVE-2018-1005, CVE-2018-1014, CVE-2018-1032.
nvd
CVE-2018-1014P4MEDIUMCVSS 5.4v2013v20162018-04-12
CVE-2018-1014 [MEDIUM] CVE-2018-1014: An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sa
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint. This CVE ID is unique from CVE-2018-1005, CVE-2018-1032, CVE-2018-1034.
nvd
CVE-2018-1005P4MEDIUMCVSS 5.4v2013v20162018-04-12
CVE-2018-1005 [MEDIUM] CWE-79 CVE-2018-1005: An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sa
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint. This CVE ID is unique from CVE-2018-1014, CVE-2018-1032, CVE-2018-1034.
nvd
CVE-2018-0869P4MEDIUMCVSS 5.4v20162018-02-15
CVE-2018-0869 [MEDIUM] CWE-79 CVE-2018-0869: SharePoint Server 2016 allows an elevation of privilege vulnerability due to how web requests are ha
SharePoint Server 2016 allows an elevation of privilege vulnerability due to how web requests are handled, aka "Microsoft SharePoint Elevation of Privilege Vulnerability".
nvd
CVE-2021-43242P4MEDIUMCVSS 5.7v20162021-12-15
CVE-2021-43242 [MEDIUM] CVE-2021-43242: Microsoft SharePoint Server Spoofing Vulnerability
Microsoft SharePoint Server Spoofing Vulnerability
nvd
CVE-2021-1717P4MEDIUMCVSS 5.4v20162021-01-12
CVE-2021-1717 [MEDIUM] CVE-2021-1717: Microsoft SharePoint Server Spoofing Vulnerability
Microsoft SharePoint Server Spoofing Vulnerability
nvd
CVE-2021-1641P4MEDIUMCVSS 5.4v20162021-01-12
CVE-2021-1641 [MEDIUM] CVE-2021-1641: Microsoft SharePoint Server Spoofing Vulnerability
Microsoft SharePoint Server Spoofing Vulnerability
nvd
CVE-2020-17060P4MEDIUMCVSS 5.4v2013v20162020-11-11
CVE-2020-17060 [MEDIUM] CVE-2020-17060: Microsoft SharePoint Server Spoofing Vulnerability
Microsoft SharePoint Server Spoofing Vulnerability
nvd
CVE-2018-8428P4MEDIUMCVSS 5.4v2013-sp1v20162018-09-13
CVE-2018-8428 [MEDIUM] CWE-79 CVE-2018-8428: An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sa
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint. This CVE ID is unique from CVE-2018-8431.
nvd
CVE-2020-0975P4MEDIUMCVSS 5.4v20162020-04-15
CVE-2020-0975 [MEDIUM] CVE-2020-0975: A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specia
A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulnerability'. This CVE ID is unique from CVE-2020-0972, CVE-2020-0976, CVE-2020-0977.
nvd
CVE-2020-0972P4MEDIUMCVSS 5.4v20162020-04-15
CVE-2020-0972 [MEDIUM] CVE-2020-0972: A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specia
A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulnerability'. This CVE ID is unique from CVE-2020-0975, CVE-2020-0976, CVE-2020-0977.
nvd
CVE-2020-0977P4MEDIUMCVSS 5.4v2013v20162020-04-15
CVE-2020-0977 [MEDIUM] CVE-2020-0977: A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specia
A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulnerability'. This CVE ID is unique from CVE-2020-0972, CVE-2020-0975, CVE-2020-0976.
nvd