← Back

Sharepoint Server

sharepoint_server

Vendor: Microsoft • 632 CVEs

CVEs (632)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Microsoft
1Sharepoint Server
Oct 21, 2026
Aug 11, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
1Microsoft
1Sharepoint Server
Aug 13, 2026
Aug 11, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
1Microsoft
1Sharepoint Server
Aug 13, 2026
Aug 11, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
1Microsoft
1Sharepoint Server
Sep 26, 2026
Aug 11, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
1Microsoft
1Sharepoint Server
Aug 13, 2026
Aug 11, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
1Microsoft
1Sharepoint Server
Aug 13, 2026
Aug 11, 2026
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
1Microsoft
1Sharepoint Server
Aug 13, 2026
Aug 11, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Missing authentication for critical function in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
1Microsoft
1Sharepoint Server
Aug 13, 2026
Aug 11, 2026
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
1Microsoft
1Sharepoint Server
Aug 11, 2026
Aug 11, 2026
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
1Microsoft
1Sharepoint Server
Aug 12, 2026
Aug 11, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
1Microsoft
1Sharepoint Server
Aug 19, 2026
Aug 11, 2026
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
1Microsoft
1Sharepoint Server
Aug 11, 2026
Aug 11, 2026
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
1Microsoft
1Sharepoint Server
Aug 13, 2026
Aug 11, 2026
N/A· v4
8.1 HIGH· v3
N/A· v2
Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.
1Microsoft
1Sharepoint Server
Aug 12, 2026
Aug 11, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
1Microsoft
1Sharepoint Server
Aug 12, 2026
Aug 11, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
1Microsoft
1Sharepoint Server
Aug 12, 2026
Aug 11, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to perform tampering over a network.
1Microsoft
1Sharepoint Server
Aug 13, 2026
Aug 11, 2026
N/A· v4
4.6 MEDIUM· v3
N/A· v2
Improper input validation in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
1Microsoft
1Sharepoint Server
Aug 13, 2026
Aug 11, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Insufficiently protected credentials in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
1Microsoft
1Sharepoint Server
Aug 11, 2026
Aug 11, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Relative path traversal in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
1Microsoft
1Sharepoint Server
Aug 11, 2026
Aug 11, 2026
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.