Microsoft Sharepoint Server vulnerabilities
548 known vulnerabilities affecting microsoft/sharepoint_server.
Total CVEs
548
CISA KEV
18
actively exploited
Public exploits
29
Exploited in wild
31
Severity breakdown
CRITICAL44HIGH263MEDIUM226LOW15
Vulnerabilities
Page 25 of 28
CVE-2020-0926P4MEDIUMCVSS 5.4v20192020-04-15
CVE-2020-0926 [MEDIUM] CVE-2020-0926: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0923, CVE-2020-0924, CVE-2020-0925, CVE-2020-0927, CVE-2020-0930, CVE-2020-0933, CVE-2020-0954,
nvd
CVE-2020-1107P4MEDIUMCVSS 5.4v20192020-05-21
CVE-2020-1107 [MEDIUM] CVE-2020-1107: A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specia
A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulnerability'. This CVE ID is unique from CVE-2020-1104, CVE-2020-1105.
nvd
CVE-2020-1148P4MEDIUMCVSS 5.4v2010v20192020-06-09
CVE-2020-1148 [MEDIUM] CWE-79 CVE-2020-1148: A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specia
A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulnerability'. This CVE ID is unique from CVE-2020-1289.
nvd
CVE-2026-44821P4MEDIUMCVSS 5.5fixed in 16.0.19725.20384v2016+1 more2026-06-09
CVE-2026-44821 [MEDIUM] CWE-125 CVE-2026-44821: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
nvd
CVE-2013-1290P4LOWCVSS 3.5v20132013-04-09
CVE-2013-1290 [LOW] CWE-264 CVE-2013-1290: Microsoft SharePoint Server 2013, in certain configurations involving legacy My Sites, does not prop
Microsoft SharePoint Server 2013, in certain configurations involving legacy My Sites, does not properly establish default access controls for a SharePoint list, which allows remote authenticated users to bypass intended restrictions on reading list items via a direct request for a list's location, aka "Incorrect Access Rights Information Disclosure Vuln
nvd
CVE-2022-22716P4MEDIUMCVSS 5.5v20132022-02-09
CVE-2022-22716 [MEDIUM] CWE-119 CVE-2022-22716: Microsoft Excel Information Disclosure Vulnerability
Microsoft Excel Information Disclosure Vulnerability
nvd
CVE-2019-0557P4MEDIUMCVSS 5.4v20162019-01-08
CVE-2019-0557 [MEDIUM] CVE-2019-0557: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft Office SharePoint XSS Vulnerability." This affects Microsoft SharePoint. This CVE ID is unique from CVE-2019-0556, CVE-2019-0558.
nvd
CVE-2019-0556P4MEDIUMCVSS 5.4v2013-sp12019-01-08
CVE-2019-0556 [MEDIUM] CWE-79 CVE-2019-0556: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft Office SharePoint XSS Vulnerability." This affects Microsoft SharePoint. This CVE ID is unique from CVE-2019-0557, CVE-2019-0558.
nvd
CVE-2020-1099P4MEDIUMCVSS 5.4v20192020-05-21
CVE-2020-1099 [MEDIUM] CWE-79 CVE-2020-1099: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1100, CVE-2020-1101, CVE-2020-1106.
nvd
CVE-2020-1101P4MEDIUMCVSS 5.4v20192020-05-21
CVE-2020-1101 [MEDIUM] CVE-2020-1101: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1099, CVE-2020-1100, CVE-2020-1106.
nvd
CVE-2020-1100P4MEDIUMCVSS 5.4v2010v20192020-05-21
CVE-2020-1100 [MEDIUM] CVE-2020-1100: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1099, CVE-2020-1101, CVE-2020-1106.
nvd
CVE-2020-1451P4MEDIUMCVSS 5.4v2010v20192020-07-14
CVE-2020-1451 [MEDIUM] CVE-2020-1451: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1450, CVE-2020-1456.
nvd
CVE-2020-1450P4MEDIUMCVSS 5.4v2010v20192020-07-14
CVE-2020-1450 [MEDIUM] CWE-79 CVE-2020-1450: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1451, CVE-2020-1456.
nvd
CVE-2019-1134P4MEDIUMCVSS 5.4v20192019-07-15
CVE-2019-1134 [MEDIUM] CWE-79 CVE-2019-1134: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'.
nvd
CVE-2019-0830P4MEDIUMCVSS 5.4v20192019-04-09
CVE-2019-0830 [MEDIUM] CWE-79 CVE-2019-0830: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2019-0831.
nvd
CVE-2019-0831P4MEDIUMCVSS 5.4v2010v20192019-04-09
CVE-2019-0831 [MEDIUM] CVE-2019-0831: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2019-0830.
nvd
CVE-2020-1320P4MEDIUMCVSS 5.4v20192020-06-09
CVE-2020-1320 [MEDIUM] CVE-2020-1320: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1177, CVE-2020-1183, CVE-2020-1297, CVE-2020-1298, CVE-2020-1318.
nvd
CVE-2020-1298P4MEDIUMCVSS 5.4v20192020-06-09
CVE-2020-1298 [MEDIUM] CVE-2020-1298: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1177, CVE-2020-1183, CVE-2020-1297, CVE-2020-1318, CVE-2020-1320.
nvd
CVE-2020-0927P4MEDIUMCVSS 5.4v20192020-04-15
CVE-2020-0927 [MEDIUM] CVE-2020-0927: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0923, CVE-2020-0924, CVE-2020-0925, CVE-2020-0926, CVE-2020-0930, CVE-2020-0933, CVE-2020-0954,
nvd
CVE-2020-0923P4MEDIUMCVSS 5.4v20192020-04-15
CVE-2020-0923 [MEDIUM] CWE-79 CVE-2020-0923: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0924, CVE-2020-0925, CVE-2020-0926, CVE-2020-0927, CVE-2020-0930, CVE-2020-0933, CVE-2020
nvd