← Back

Sharepoint Server

sharepoint_server

Vendor: Microsoft • 632 CVEs

CVEs (632)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Microsoft
1Sharepoint Server
Sep 9, 2026
Sep 8, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Missing authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
1Microsoft
1Sharepoint Server
Sep 9, 2026
Sep 8, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
1Microsoft
1Sharepoint Server
Sep 9, 2026
Sep 8, 2026
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
1Microsoft
1Sharepoint Server
Sep 9, 2026
Sep 8, 2026
N/A· v4
7.7 HIGH· v3
N/A· v2
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
1Microsoft
1Sharepoint Server
Sep 9, 2026
Sep 8, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
1Microsoft
1Sharepoint Server
Sep 10, 2026
Sep 8, 2026
N/A· v4
4.8 MEDIUM· v3
N/A· v2
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
1Microsoft
1Sharepoint Server
Sep 9, 2026
Sep 8, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Missing authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
1Microsoft
1Sharepoint Server
Sep 9, 2026
Sep 8, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
1Microsoft
1Sharepoint Server
Sep 9, 2026
Sep 8, 2026
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
1Microsoft
1Sharepoint Server
Sep 9, 2026
Sep 8, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
1Microsoft
1Sharepoint Server
Sep 10, 2026
Sep 8, 2026
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
1Microsoft
1Sharepoint Server
Sep 9, 2026
Sep 8, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
1Microsoft
1Sharepoint Server
Sep 9, 2026
Sep 8, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
1Microsoft
1Sharepoint Server
Sep 9, 2026
Sep 8, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
1Microsoft
1Sharepoint Server
Aug 13, 2026
Aug 11, 2026
N/A· v4
8.7 HIGH· v3
N/A· v2
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
1Microsoft
1Sharepoint Server
Oct 23, 2026
Aug 11, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
1Microsoft
1Sharepoint Server
Aug 13, 2026
Aug 11, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
1Microsoft
1Sharepoint Server
Oct 23, 2026
Aug 11, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
1Microsoft
1Sharepoint Server
Aug 16, 2026
Aug 11, 2026
N/A· v4
9.3 CRITICAL· v3
N/A· v2
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
1Microsoft
1Sharepoint Server
Aug 13, 2026
Aug 11, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.