Advisories · Technology

Microsoft SharePoint Server 2019.

Every CVE that names Microsoft SharePoint Server 2019 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-26251 CVE record

CVSS 6.8 Medium

Microsoft SharePoint Server Spoofing Vulnerability
- Microsoft SharePoint Server 2019
- Microsoft SharePoint Server Subscription Edition
- Cross-site scripting (XSS)
Not analysed yet 9 Apr 2024
CVE-2024-21426 CVE record

CVSS 7.8 High

Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- Memory corruption
Not analysed yet 12 Mar 2024
CVE-2024-21318 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- Insecure deserialization
Not analysed yet 9 Jan 2024
CVE-2023-38177 CVE record

CVSS 6.1 Medium

Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- Insecure deserialization
Not analysed yet 14 Nov 2023
CVE-2023-36764 CVE record

CVSS 8.8 High

Microsoft SharePoint Server Elevation of Privilege Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- Path traversal
Not analysed yet 12 Sept 2023
CVE-2023-36894 CVE record

CVSS 6.5 Medium

Microsoft SharePoint Server Information Disclosure Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- Information disclosure
Not analysed yet 8 Aug 2023
CVE-2023-36892 CVE record

CVSS 8.0 High

Microsoft SharePoint Server Spoofing Vulnerability
- Microsoft SharePoint Server 2019
- Microsoft SharePoint Server Subscription Edition
- Cross-site scripting (XSS)
Not analysed yet 8 Aug 2023
CVE-2023-36891 CVE record

CVSS 8.0 High

Microsoft SharePoint Server Spoofing Vulnerability
- Microsoft SharePoint Server 2019
- Microsoft SharePoint Server Subscription Edition
- Cross-site scripting (XSS)
Not analysed yet 8 Aug 2023
CVE-2023-36890 CVE record

CVSS 6.5 Medium

Microsoft SharePoint Server Information Disclosure Vulnerability
- Microsoft SharePoint Server 2019
- Microsoft SharePoint Server Subscription Edition
- Broken access control
Not analysed yet 8 Aug 2023
CVE-2023-33160 CVE record

CVSS 8.8 High

Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- Insecure deserialization
Not analysed yet 11 Jul 2023
CVE-2023-33159 CVE record

CVSS 8.8 High

Microsoft SharePoint Server Spoofing Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- Cross-site scripting (XSS)
Not analysed yet 11 Jul 2023
CVE-2023-33157 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Microsoft SharePoint Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- Code injection
Not analysed yet 11 Jul 2023
CVE-2023-33134 CVE record

CVSS 8.8 High

Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- Insecure deserialization
Not analysed yet 11 Jul 2023
CVE-2023-33165 CVE record

CVSS 4.3 Medium

Microsoft SharePoint Server Security Feature Bypass Vulnerability
- Microsoft SharePoint Server 2019
- Microsoft SharePoint Server Subscription Edition
- Information disclosure
Not analysed yet 11 Jul 2023
CVE-2023-33142 CVE record

CVSS 6.5 Medium

Microsoft SharePoint Server Elevation of Privilege Vulnerability
- Microsoft SharePoint Server 2019
- Microsoft SharePoint Server Subscription Edition
- Broken access control
Not analysed yet 13 Jun 2023
CVE-2023-33132 CVE record

CVSS 6.3 Medium

Microsoft SharePoint Server Spoofing Vulnerability
- Microsoft SharePoint Server 2019
- Microsoft SharePoint Server Subscription Edition
- Cross-site scripting (XSS)
Not analysed yet 13 Jun 2023
CVE-2023-33130 CVE record

CVSS 7.3 High

Microsoft SharePoint Server Spoofing Vulnerability
- Microsoft SharePoint Server 2019
- Microsoft SharePoint Server Subscription Edition
- Cross-site scripting (XSS)
Not analysed yet 13 Jun 2023
CVE-2023-33129 CVE record

CVSS 6.5 Medium

Microsoft SharePoint Server Denial of Service Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- Memory corruption
Not analysed yet 13 Jun 2023
CVE-2023-29357 CVE record

CVSS 9.8 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV · ransomware

Microsoft SharePoint Server Elevation of Privilege Vulnerability
- Microsoft SharePoint Server 2019
- Authentication bypass
Not analysed yet 13 Jun 2023
CVE-2023-24955 CVE record

CVSS 7.2 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware

Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- Code injection
Not analysed yet 9 May 2023
CVE-2023-24954 CVE record

CVSS 6.5 Medium

Microsoft SharePoint Server Information Disclosure Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- Server-side request forgery (SSRF)
Not analysed yet 9 May 2023
CVE-2023-24950 CVE record

CVSS 6.5 Medium

Microsoft SharePoint Server Spoofing Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- CWE-20
Not analysed yet 9 May 2023
CVE-2023-28288 CVE record

CVSS 8.1 High

Microsoft SharePoint Server Spoofing Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
- Server-side request forgery (SSRF)
Not analysed yet 11 Apr 2023
CVE-2023-23395 CVE record

CVSS 3.1 Low

Microsoft SharePoint Server Spoofing Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
- Open redirect
Not analysed yet 14 Mar 2023
CVE-2023-21717 CVE record

CVSS 8.8 High

Microsoft SharePoint Server Elevation of Privilege Vulnerability
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
- Microsoft SharePoint Enterprise Server 2016
- Broken access control
Not analysed yet 14 Feb 2023
CVE-2023-21716 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Microsoft Word Remote Code Execution Vulnerability
- Microsoft 365 Apps for Enterprise
- Microsoft Office 2019
- Memory corruption
Not analysed yet 14 Feb 2023
CVE-2023-21744 CVE record

CVSS 8.8 High

Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
- Insecure deserialization
Not analysed yet 10 Jan 2023
CVE-2023-21743 CVE record

CVSS 5.3 Medium

Microsoft SharePoint Server Security Feature Bypass Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- Authentication bypass
Not analysed yet 10 Jan 2023
CVE-2023-21742 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
- Broken access control
Not analysed yet 10 Jan 2023
CVE-2022-44693 CVE record

CVSS 8.8 High

Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
Not analysed yet 13 Dec 2022
CVE-2022-44690 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
Not analysed yet 13 Dec 2022
CVE-2022-41122 CVE record

CVSS 6.5 Medium

Microsoft SharePoint Server Spoofing Vulnerability
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
- Microsoft SharePoint Enterprise Server 2016
Not analysed yet 9 Nov 2022
CVE-2022-41103 CVE record

CVSS 5.5 Medium

Microsoft Word Information Disclosure Vulnerability
- Microsoft 365 Apps for Enterprise
- Microsoft Office 2019
Not analysed yet 9 Nov 2022
CVE-2022-41062 CVE record

CVSS 8.8 High

Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
- Microsoft SharePoint Enterprise Server 2016
Not analysed yet 9 Nov 2022
CVE-2022-41061 CVE record

CVSS 7.8 High

Microsoft Word Remote Code Execution Vulnerability
- Microsoft 365 Apps for Enterprise
- Microsoft Office 2019 for Mac
- Code injection
Not analysed yet 9 Nov 2022
CVE-2022-41060 CVE record

CVSS 5.5 Medium

Microsoft Word Information Disclosure Vulnerability
- Microsoft 365 Apps for Enterprise
- Microsoft Office 2019
Not analysed yet 9 Nov 2022
CVE-2022-41038 CVE record

CVSS 8.8 High

Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
Not analysed yet 11 Oct 2022
CVE-2022-41037 CVE record

CVSS 8.8 High

Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
Not analysed yet 11 Oct 2022
CVE-2022-41036 CVE record

CVSS 8.8 High

Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
Not analysed yet 11 Oct 2022
CVE-2022-38053 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
Not analysed yet 11 Oct 2022
CVE-2022-38009 CVE record

CVSS 8.8 High

Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
Not analysed yet 13 Sept 2022
CVE-2022-38008 CVE record

CVSS 8.8 High

Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
Not analysed yet 13 Sept 2022
CVE-2022-37961 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
Not analysed yet 13 Sept 2022
CVE-2022-35823 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Microsoft SharePoint Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
Not analysed yet 13 Sept 2022
CVE-2022-30172 CVE record

CVSS 5.5 Medium

Microsoft Office Information Disclosure Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
Not analysed yet 15 Jun 2022
CVE-2022-30171 CVE record

CVSS 5.5 Medium

Microsoft Office Information Disclosure Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
Not analysed yet 15 Jun 2022
CVE-2022-30159 CVE record

CVSS 5.5 Medium

Microsoft Office Information Disclosure Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
Not analysed yet 15 Jun 2022
CVE-2022-30158 CVE record

CVSS 8.8 High

Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
Not analysed yet 15 Jun 2022
CVE-2022-30157 CVE record

CVSS 8.8 High

Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
Not analysed yet 15 Jun 2022
CVE-2022-29108 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
Not analysed yet 10 May 2022
CVE-2022-24472 CVE record

CVSS 8.0 High

Microsoft SharePoint Server Spoofing Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-22005 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
Not analysed yet 9 Feb 2022
CVE-2022-21987 CVE record

CVSS 8.0 High

Microsoft SharePoint Server Spoofing Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
Not analysed yet 9 Feb 2022
CVE-2022-21968 CVE record

CVSS 4.3 Medium

Microsoft SharePoint Server Security Feature Bypass Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
Not analysed yet 9 Feb 2022
CVE-2022-21840 CVE record

CVSS 8.8 High

Microsoft Office Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
Not analysed yet 11 Jan 2022
CVE-2022-21837 CVE record

CVSS 8.3 High

Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
Not analysed yet 11 Jan 2022
CVE-2021-43876 CVE record

CVSS 8.8 High

Microsoft SharePoint Elevation of Privilege Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
Not analysed yet 29 Dec 2021
CVE-2021-43242 CVE record

CVSS 7.6 High

Microsoft SharePoint Server Spoofing Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
Not analysed yet 15 Dec 2021
CVE-2021-42320 CVE record

CVSS 8.0 High

Microsoft SharePoint Server Spoofing Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
Not analysed yet 15 Dec 2021
CVE-2021-42309 CVE record

CVSS 8.8 High

Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
Not analysed yet 15 Dec 2021