← Back

Sharepoint Server

sharepoint_server

Vendor: Microsoft • 578 CVEs

CVEs (578)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Microsoft
1Sharepoint Server
Aug 13, 2026
Aug 11, 2026
N/A· v4
8.7 HIGH· v3
N/A· v2
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
1Microsoft
1Sharepoint Server
Aug 13, 2026
Aug 11, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
1Microsoft
1Sharepoint Server
Aug 13, 2026
Aug 11, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
1Microsoft
1Sharepoint Server
Aug 13, 2026
Aug 11, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
1Microsoft
1Sharepoint Server
Aug 16, 2026
Aug 11, 2026
N/A· v4
9.3 CRITICAL· v3
N/A· v2
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
1Microsoft
1Sharepoint Server
Aug 13, 2026
Aug 11, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
1Microsoft
1Sharepoint Server
Aug 13, 2026
Aug 11, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
1Microsoft
1Sharepoint Server
Aug 13, 2026
Aug 11, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
1Microsoft
1Sharepoint Server
Aug 13, 2026
Aug 11, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
1Microsoft
1Sharepoint Server
Aug 27, 2026
Aug 11, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
1Microsoft
1Sharepoint Server
Aug 13, 2026
Aug 11, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
1Microsoft
1Sharepoint Server
Aug 13, 2026
Aug 11, 2026
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
1Microsoft
1Sharepoint Server
Aug 13, 2026
Aug 11, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Missing authentication for critical function in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
1Microsoft
1Sharepoint Server
Aug 13, 2026
Aug 11, 2026
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
1Microsoft
1Sharepoint Server
Aug 11, 2026
Aug 11, 2026
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
1Microsoft
1Sharepoint Server
Aug 12, 2026
Aug 11, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
1Microsoft
1Sharepoint Server
Aug 19, 2026
Aug 11, 2026
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
1Microsoft
1Sharepoint Server
Aug 11, 2026
Aug 11, 2026
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
1Microsoft
1Sharepoint Server
Aug 13, 2026
Aug 11, 2026
N/A· v4
8.1 HIGH· v3
N/A· v2
Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.
1Microsoft
1Sharepoint Server
Aug 12, 2026
Aug 11, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.