Advisories · Technology
Microsoft SharePoint Server 2019.
Every CVE that names Microsoft SharePoint Server 2019 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.6 Medium
Microsoft SharePoint Server Spoofing Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- Cross-site scripting (XSS)
- CVSS 4.6 Medium
Microsoft SharePoint Server Spoofing Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- Cross-site scripting (XSS)
- CVSS 4.6 Medium
Microsoft SharePoint Server Spoofing Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- Cross-site scripting (XSS)
- CVSS 9.8 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV
Microsoft SharePoint Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- Insecure deserialization
- CVSS 9.8 CriticalCritical · KEV, CVSS 9+KEV
Microsoft SharePoint Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- Insecure deserialization
- CVSS 5.3 MediumCritical · KEVKEV
Microsoft SharePoint Server Elevation of Privilege Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- Authentication bypass
- CVSS 6.5 Medium
Microsoft SharePoint Server Spoofing Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- Path traversal
- CVSS 4.6 Medium
Microsoft SharePoint Server Spoofing Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- Cross-site scripting (XSS)
- CVSS 5.4 Medium
Microsoft SharePoint Server Spoofing Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- Insecure deserialization
- CVSS 8.8 HighCritical · CVSS 7+ and EPSS
Microsoft SharePoint Elevation of Privilege Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- Insecure deserialization
- CVSS 7.3 High
Microsoft SharePoint Server Spoofing Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- Cross-site scripting (XSS)
- CVSS 4.6 Medium
Microsoft SharePoint Server Spoofing Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- Cross-site scripting (XSS)
- CVSS 7.3 High
Microsoft SharePoint Server Spoofing Vulnerability
- Microsoft SharePoint Server 2019
- Microsoft SharePoint Server Subscription Edition
- Other injection
- CVSS 5.4 Medium
Microsoft SharePoint Server Spoofing Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- Cross-site scripting (XSS)
- CVSS 5.4 Medium
Microsoft SharePoint Server Spoofing Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- Cross-site scripting (XSS)
- CVSS 4.6 Medium
Microsoft SharePoint Server Spoofing Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- Cross-site scripting (XSS)
- CVSS 6.5 Medium
Microsoft SharePoint Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- Path traversal
- CVSS 5.4 Medium
Microsoft SharePoint Server Spoofing Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- Cross-site scripting (XSS)
- CVSS 4.6 Medium
Microsoft SharePoint Server Spoofing Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- CWE-20
- CVSS 5.4 Medium
Microsoft SharePoint Server Spoofing Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- Cross-site scripting (XSS)
- CVSS 4.6 Medium
Microsoft SharePoint Server Spoofing Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- Cross-site scripting (XSS)
- CVSS 4.6 Medium
Microsoft SharePoint Server Spoofing Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- Cross-site scripting (XSS)
- CVSS 5.4 Medium
Microsoft SharePoint Server Spoofing Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- Cross-site scripting (XSS)
- CVSS 8.0 High
Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- Broken access control
- CVSS 8.4 High
Microsoft Outlook and Word Remote Code Execution Vulnerability
- Microsoft 365 Apps for Enterprise
- Microsoft Office 2019
- Memory corruption
- CVSS 8.4 High
Microsoft Outlook and Word Remote Code Execution Vulnerability
- Microsoft 365 Apps for Enterprise
- Microsoft Office 2019
- Memory corruption
- CVSS 5.4 Medium
Microsoft SharePoint Server Spoofing Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- Cross-site scripting (XSS)
- CVSS 7.8 High
Microsoft Office Remote Code Execution Vulnerability
- Microsoft 365 Apps for Enterprise
- Microsoft Office 2016
- Memory corruption
- CVSS 5.5 Medium
Microsoft Office Information Disclosure Vulnerability
- Microsoft 365 Apps for Enterprise
- Microsoft Office 2016
- Memory corruption
- CVSS 7.8 High
Microsoft Office Remote Code Execution Vulnerability
- Microsoft 365 Apps for Enterprise
- Microsoft Office 2016
- Memory corruption
- CVSS 4.6 Medium
Microsoft Office Project Server Spoofing Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- Cross-site scripting (XSS)
- CVSS 3.3 Low
Microsoft Office Information Disclosure Vulnerability
- Microsoft 365 Apps for Enterprise
- Microsoft Office 2016
- Memory corruption
- CVSS 4.6 Medium
Microsoft SharePoint Server Spoofing Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- Cross-site scripting (XSS)
- CVSS 7.8 High
Microsoft Word Remote Code Execution Vulnerability
- Microsoft 365 Apps for Enterprise
- Microsoft Office 2019
- Memory corruption
- CVSS 7.8 High
Microsoft Office Remote Code Execution Vulnerability
- Microsoft 365 Apps for Enterprise
- Microsoft Office 2016
- Memory corruption
- CVSS 4.6 Medium
Microsoft SharePoint Server Spoofing Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- Cross-site scripting (XSS)
- CVSS 4.6 Medium
Microsoft SharePoint Server Spoofing Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- Cross-site scripting (XSS)
- CVSS 8.0 High
Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- Command injection
- CVSS 8.8 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware
Microsoft SharePoint Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- Insecure deserialization
- CVSS 8.4 High
Microsoft Word Remote Code Execution Vulnerability
- Microsoft 365 Apps for Enterprise
- Microsoft Office 2019
- Memory corruption
- CVSS 8.8 High
Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- CWE-1220
- CVSS 8.8 High
Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- Insecure deserialization
- CVSS 8.8 HighCritical · CVSS 7+ and EPSS
Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- Insecure deserialization
- CVSS 8.8 High
Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- Insecure deserialization
- CVSS 8.0 High
Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- Insecure deserialization
- CVSS 8.8 High
Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- Insecure deserialization
- CVSS 6.5 MediumCritical · KEVKEV
Microsoft SharePoint Server Spoofing Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- CWE-20
- CVSS 4.6 Medium
Microsoft SharePoint Server Spoofing Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- Cross-site scripting (XSS)
- CVSS 8.8 High
Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- CWE-20
- CVSS 8.8 High
Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- Insecure deserialization
- CVSS 8.4 High
Microsoft Office Remote Code Execution Vulnerability
- Microsoft 365 Apps for Enterprise
- Microsoft Office 2016
- Memory corruption
- CVSS 8.1 High
Microsoft SharePoint Server Spoofing Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- Cross-site scripting (XSS)
- CVSS 7.5 High
Microsoft Outlook Spoofing Vulnerability
- Microsoft 365 Apps for Enterprise
- Microsoft Office 2019
- Insecure deserialization
- CVSS 7.5 High
Microsoft Outlook Spoofing Vulnerability
- Microsoft 365 Apps for Enterprise
- Microsoft Office 2019
- Information disclosure
- CVSS 5.4 Medium
Microsoft SharePoint Information Disclosure Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- Server-side request forgery (SSRF)
- CVSS 7.8 High
Microsoft Word Remote Code Execution Vulnerability
- Microsoft 365 Apps for Enterprise
- Microsoft Office 2019
- Memory corruption
- CVSS 8.8 HighCritical · CVSS 7+ and EPSS
Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- SQL injection
- CVSS 9.8 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV
Microsoft SharePoint Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- Insecure deserialization
- CVSS 4.6 Medium
Microsoft SharePoint Server Spoofing Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- Cross-site scripting (XSS)
- CVSS 7.8 High
Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- CWE-20