Microsoft SharePoint Server at a glance
1 of the exploited vulnerabilities are known to be used by ransomware (CISA).
Show as table
| Month | Vulnerabilities | Critical |
|---|---|---|
| Nov 2026 | 0 | 0 |
| Oct 2026 | 0 | 0 |
| Sep 2026 | 0 | 0 |
| Aug 2026 | 0 | 0 |
| Jul 2026 | 0 | 0 |
| Jun 2026 | 0 | 0 |
| May 2026 | 0 | 0 |
| Apr 2026 | 0 | 0 |
| Mar 2026 | 0 | 0 |
| Feb 2026 | 0 | 0 |
| Jan 2026 | 0 | 0 |
| Dec 2025 | 0 | 0 |
| Nov 2025 | 0 | 0 |
| Oct 2025 | 0 | 0 |
| Sep 2025 | 0 | 0 |
| Aug 2025 | 0 | 0 |
| Jul 2025 | 0 | 0 |
| Jun 2025 | 0 | 0 |
| May 2025 | 0 | 0 |
| Apr 2025 | 0 | 0 |
| Mar 2025 | 0 | 0 |
| Feb 2025 | 0 | 0 |
| Jan 2025 | 0 | 0 |
| Dec 2024 | 0 | 0 |
Most common weaknesses
86 results · Feed
-
Medium 5.4
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a special…
-
Medium 5.4
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a special…
-
Medium 5.4
This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affect…
-
Medium 5.4
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a special…
-
Unscored —CVE-2020-1447 EPSS 11%
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in mem…
-
Unscored —
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in mem…
-
Unscored —
An information disclosure vulnerability exists when Microsoft Office improperly discloses the contents of its memory, a…
-
Unscored —CVE-2020-1446 EPSS 11%
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in mem…
-
Unscored —
A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web req…
-
Unscored —
A remote code execution vulnerability exists in the way Microsoft SharePoint software parses specially crafted email me…
-
Unscored —CVE-2020-1439 EPSS 20%
A remote code execution vulnerability exists in PerformancePoint Services for SharePoint Server when the software fails…
-
Unscored —
An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an unini…
-
High 7.8
.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability
A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulne…
KEV Nov 3, 2021 -
Unscored —
An open redirect vulnerability exists in Microsoft SharePoint that could lead to spoofing.To exploit the vulnerability,…
-
Medium 5.4
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a special…
-
Medium 5.4
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a special…
-
Medium 5.4
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a special…
-
Medium 5.4
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a special…
-
Unscored —
An elevation of privilege vulnerability exists in Microsoft SharePoint, aka 'Microsoft SharePoint Elevation of Privileg…
-
Unscored —CVE-2020-1181 EPSS 69%
A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filt…
-
Medium 5.4
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a special…
-
Unscored —
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially …
-
Medium 5.4
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a special…
-
Unscored —
A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web req…
-
Unscored —CVE-2020-0980 EPSS 12%
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in mem…
-
Medium 5.4
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a special…
-
Unscored —
A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web req…
-
Unscored —CVE-2020-0974 EPSS 11%
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup…
-
Unscored —
A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web req…
-
Medium 5.4
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a special…
-
Unscored —CVE-2020-0971 EPSS 13%
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup…
-
Unscored —
A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web req…
-
Medium 5.4
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a special…
-
Medium 5.4
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a special…
-
Unscored —CVE-2020-0932 EPSS 36%
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup…
-
Unscored —CVE-2020-0931 EPSS 11%
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup…
-
Unscored —CVE-2020-0929 EPSS 11%
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup…
-
Medium 5.4
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a special…
-
Medium 5.4
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a special…
-
Medium 5.4
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a special…