Advisories · Technology

Microsoft SharePoint Enterprise Server 2013 Service Pack 1.

Every CVE that names Microsoft SharePoint Enterprise Server 2013 Service Pack 1 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-28288 CVE record

CVSS 8.1 High

Microsoft SharePoint Server Spoofing Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
- Server-side request forgery (SSRF)
Not analysed yet 11 Apr 2023
CVE-2023-23395 CVE record

CVSS 3.1 Low

Microsoft SharePoint Server Spoofing Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
- Open redirect
Not analysed yet 14 Mar 2023
CVE-2023-21717 CVE record

CVSS 8.8 High

Microsoft SharePoint Server Elevation of Privilege Vulnerability
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
- Microsoft SharePoint Enterprise Server 2016
- Broken access control
Not analysed yet 14 Feb 2023
CVE-2023-21716 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Microsoft Word Remote Code Execution Vulnerability
- Microsoft 365 Apps for Enterprise
- Microsoft Office 2019
- Memory corruption
Not analysed yet 14 Feb 2023
CVE-2023-21744 CVE record

CVSS 8.8 High

Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
- Insecure deserialization
Not analysed yet 10 Jan 2023
CVE-2023-21742 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
- Broken access control
Not analysed yet 10 Jan 2023
CVE-2022-44693 CVE record

CVSS 8.8 High

Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
Not analysed yet 13 Dec 2022
CVE-2022-44690 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
Not analysed yet 13 Dec 2022
CVE-2022-41122 CVE record

CVSS 6.5 Medium

Microsoft SharePoint Server Spoofing Vulnerability
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
- Microsoft SharePoint Enterprise Server 2016
Not analysed yet 9 Nov 2022
CVE-2022-41103 CVE record

CVSS 5.5 Medium

Microsoft Word Information Disclosure Vulnerability
- Microsoft 365 Apps for Enterprise
- Microsoft Office 2019
Not analysed yet 9 Nov 2022
CVE-2022-41062 CVE record

CVSS 8.8 High

Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
- Microsoft SharePoint Enterprise Server 2016
Not analysed yet 9 Nov 2022
CVE-2022-41061 CVE record

CVSS 7.8 High

Microsoft Word Remote Code Execution Vulnerability
- Microsoft 365 Apps for Enterprise
- Microsoft Office 2019 for Mac
- Code injection
Not analysed yet 9 Nov 2022
CVE-2022-41060 CVE record

CVSS 5.5 Medium

Microsoft Word Information Disclosure Vulnerability
- Microsoft 365 Apps for Enterprise
- Microsoft Office 2019
Not analysed yet 9 Nov 2022
CVE-2022-41038 CVE record

CVSS 8.8 High

Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
Not analysed yet 11 Oct 2022
CVE-2022-41037 CVE record

CVSS 8.8 High

Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
Not analysed yet 11 Oct 2022
CVE-2022-41036 CVE record

CVSS 8.8 High

Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
Not analysed yet 11 Oct 2022
CVE-2022-38053 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
Not analysed yet 11 Oct 2022
CVE-2022-38009 CVE record

CVSS 8.8 High

Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
Not analysed yet 13 Sept 2022
CVE-2022-38008 CVE record

CVSS 8.8 High

Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
Not analysed yet 13 Sept 2022
CVE-2022-37961 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
Not analysed yet 13 Sept 2022
CVE-2022-35823 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Microsoft SharePoint Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
Not analysed yet 13 Sept 2022
CVE-2022-30172 CVE record

CVSS 5.5 Medium

Microsoft Office Information Disclosure Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
Not analysed yet 15 Jun 2022
CVE-2022-30171 CVE record

CVSS 5.5 Medium

Microsoft Office Information Disclosure Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
Not analysed yet 15 Jun 2022
CVE-2022-30159 CVE record

CVSS 5.5 Medium

Microsoft Office Information Disclosure Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
Not analysed yet 15 Jun 2022
CVE-2022-30157 CVE record

CVSS 8.8 High

Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
Not analysed yet 15 Jun 2022
CVE-2022-22716 CVE record

CVSS 5.5 Medium

Microsoft Excel Information Disclosure Vulnerability
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
- Microsoft Office 2019
Not analysed yet 9 Feb 2022
CVE-2022-22005 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
Not analysed yet 9 Feb 2022
CVE-2022-21987 CVE record

CVSS 8.0 High

Microsoft SharePoint Server Spoofing Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
Not analysed yet 9 Feb 2022
CVE-2022-21840 CVE record

CVSS 8.8 High

Microsoft Office Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
Not analysed yet 11 Jan 2022
CVE-2021-43876 CVE record

CVSS 8.8 High

Microsoft SharePoint Elevation of Privilege Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
Not analysed yet 29 Dec 2021
CVE-2021-42294 CVE record

CVSS 7.2 High

Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
Not analysed yet 15 Dec 2021
CVE-2021-40442 CVE record

CVSS 7.8 High

Microsoft Excel Remote Code Execution Vulnerability
- Microsoft 365 Apps for Enterprise
- Microsoft Excel 2013 Service Pack 1
Not analysed yet 10 Nov 2021
CVE-2021-40486 CVE record

CVSS 7.8 High

Microsoft Word Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
Not analysed yet 13 Oct 2021
CVE-2021-40485 CVE record

CVSS 7.8 High

Microsoft Excel Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
- Microsoft Office 2019
- Code injection
Not analysed yet 13 Oct 2021
CVE-2021-36940 CVE record

CVSS 7.6 High

Microsoft SharePoint Server Spoofing Vulnerability
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
- Microsoft SharePoint Enterprise Server 2016
Not analysed yet 12 Aug 2021
CVE-2021-34519 CVE record

CVSS 5.3 Medium

Microsoft SharePoint Server Information Disclosure Vulnerability
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
- Microsoft SharePoint Enterprise Server 2016
Not analysed yet 14 Jul 2021
CVE-2021-34517 CVE record

CVSS 5.3 Medium

Microsoft SharePoint Server Spoofing Vulnerability
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
- Microsoft SharePoint Enterprise Server 2016
Not analysed yet 14 Jul 2021
CVE-2021-31966 CVE record

CVSS 7.2 High

Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
Not analysed yet 8 Jun 2021
CVE-2021-31963 CVE record

CVSS 7.1 High

Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
Not analysed yet 8 Jun 2021
CVE-2021-28453 CVE record

CVSS 7.8 High

Microsoft Word Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
Not analysed yet 13 Apr 2021
CVE-2021-28450 CVE record

CVSS 5.0 Medium

Microsoft SharePoint Denial of Service Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
Not analysed yet 13 Apr 2021
CVE-2021-1716 CVE record

CVSS 7.8 High

Microsoft Word Remote Code Execution Vulnerability
- Microsoft Office Web Apps Server 2013 Service Pack 1
- Microsoft SharePoint Enterprise Server 2016
Not analysed yet 12 Jan 2021
CVE-2021-1715 CVE record

CVSS 7.8 High

Microsoft Word Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
Not analysed yet 12 Jan 2021
CVE-2021-1714 CVE record

CVSS 7.8 High

Microsoft Excel Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
- Microsoft Office 2019
Not analysed yet 12 Jan 2021
CVE-2020-17060 CVE record

CVSS 5.4 Medium

Microsoft SharePoint Server Spoofing Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
Not analysed yet 11 Nov 2020
CVE-2020-17016 CVE record

CVSS 8.0 High

Microsoft SharePoint Server Spoofing Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
Not analysed yet 11 Nov 2020
CVE-2020-16929 CVE record

CVSS 7.8 High

Microsoft Excel Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
- Microsoft Office 2019
Not analysed yet 16 Oct 2020
CVE-2020-1595 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Microsoft SharePoint Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
Not analysed yet 11 Sept 2020
CVE-2020-1576 CVE record

CVSS 8.5 High

Microsoft SharePoint Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
Not analysed yet 11 Sept 2020
CVE-2020-1460 CVE record

CVSS 8.6 High

Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
Not analysed yet 11 Sept 2020
CVE-2020-1453 CVE record

CVSS 8.6 High

Microsoft SharePoint Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
Not analysed yet 11 Sept 2020
CVE-2020-1452 CVE record

CVSS 8.6 High

Microsoft SharePoint Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
Not analysed yet 11 Sept 2020
CVE-2020-1440 CVE record

CVSS 6.3 Medium

Microsoft SharePoint Server Tampering Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
Not analysed yet 11 Sept 2020
CVE-2020-1227 CVE record

CVSS 5.4 Medium

Microsoft Office SharePoint XSS Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
Not analysed yet 11 Sept 2020
CVE-2020-1224 CVE record

CVSS 5.5 Medium

Microsoft Excel Information Disclosure Vulnerability
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
- Microsoft Office 2019
Not analysed yet 11 Sept 2020
CVE-2020-1218 CVE record

CVSS 7.8 High

Microsoft Word Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
Not analysed yet 11 Sept 2020
CVE-2020-1210 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Microsoft SharePoint Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft Business Productivity Servers 2010 Service Pack 2
Not analysed yet 11 Sept 2020
CVE-2020-1198 CVE record

CVSS 7.4 High

Microsoft Office SharePoint XSS Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
Not analysed yet 11 Sept 2020
CVE-2020-1583 CVE record

CVSS 8.8 High

Microsoft Word Information Disclosure Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
Not analysed yet 17 Aug 2020
CVE-2020-1580 CVE record

Microsoft Office SharePoint XSS Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
Not analysed yet 17 Aug 2020