Advisories · Technology
Microsoft SharePoint Server Subscription Edition.
Every CVE that names Microsoft SharePoint Server Subscription Edition among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.8 High
Microsoft Office SharePoint Remote Code Execution Vulnerability
- Microsoft SharePoint Server Subscription Edition
- Path traversal
- CVSS 8.8 High
Microsoft Office SharePoint Elevation of Privilege Vulnerability
- Microsoft SharePoint Server Subscription Edition
- Broken access control
- CVSS 7.4 High
Microsoft Office SharePoint Remote Code Execution Vulnerability
- Microsoft SharePoint Server Subscription Edition
- Insecure deserialization
- CVSS 8.8 High
Microsoft Office SharePoint Elevation of Privilege Vulnerability
- Microsoft SharePoint Server Subscription Edition
- Privilege escalation
- CWE-1287
- CVSS 7.5 High
Microsoft Office SharePoint Elevation of Privilege Vulnerability
- Microsoft SharePoint Server Subscription Edition
- Server-side request forgery (SSRF)
- CVSS 8.8 High
Microsoft Office SharePoint Elevation of Privilege Vulnerability
- Microsoft SharePoint Server Subscription Edition
- Privilege escalation
- CVSS 8.8 High
Microsoft Office SharePoint Remote Code Execution Vulnerability
- Microsoft SharePoint Server Subscription Edition
- Memory corruption
- CVSS 8.8 High
Microsoft Office SharePoint Remote Code Execution Vulnerability
- Microsoft SharePoint Server Subscription Edition
- Memory corruption
- CVSS 6.5 Medium
Microsoft Office SharePoint Information Disclosure Vulnerability
- Microsoft SharePoint Server Subscription Edition
- Path traversal
- CVSS 8.8 High
Microsoft Office SharePoint Elevation of Privilege Vulnerability
- Microsoft SharePoint Server Subscription Edition
- Broken access control
- CVSS 4.9 Medium
Microsoft Office SharePoint Information Disclosure Vulnerability
- Microsoft SharePoint Server Subscription Edition
- Broken access control
- CVSS 7.5 High
Microsoft Office SharePoint Elevation of Privilege Vulnerability
- Microsoft SharePoint Server Subscription Edition
- Server-side request forgery (SSRF)
- CVSS 8.1 High
Microsoft Office SharePoint Spoofing Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- Cross-site scripting (XSS)
- CVSS 6.8 Medium
Microsoft Office SharePoint Tampering Vulnerability
- Microsoft SharePoint Server Subscription Edition
- Information disclosure
- CVSS 8.8 High
Microsoft Office Excel Remote Code Execution Vulnerability
- Microsoft 365 Apps for Enterprise
- Microsoft Office 365 for Mac
- Memory corruption
- CVSS 4.6 Medium
Microsoft Office SharePoint Spoofing Vulnerability
- Microsoft SharePoint Server Subscription Edition
- Cross-site scripting (XSS)
- CVSS 4.6 Medium
Microsoft Office SharePoint Spoofing Vulnerability
- Microsoft SharePoint Server Subscription Edition
- Cross-site scripting (XSS)
- CVSS 7.3 High
Microsoft Office SharePoint Spoofing Vulnerability
- Microsoft SharePoint Server Subscription Edition
- Cross-site scripting (XSS)
- CVSS 8.8 High
Microsoft Office SharePoint Elevation of Privilege Vulnerability
- Microsoft SharePoint Server Subscription Edition
- Broken access control
- CVSS 8.8 High
Microsoft Office SharePoint Remote Code Execution Vulnerability
- Microsoft SharePoint Server Subscription Edition
- Memory corruption
- CVSS 8.8 High
Microsoft Office SharePoint Remote Code Execution Vulnerability
- Microsoft SharePoint Server Subscription Edition
- Insecure deserialization
- CVSS 6.5 Medium
Microsoft Office SharePoint Information Disclosure Vulnerability
- Microsoft SharePoint Server Subscription Edition
- Path traversal
- CVSS 8.8 High
Microsoft Office SharePoint Elevation of Privilege Vulnerability
- Microsoft SharePoint Server Subscription Edition
- SQL injection
- CVSS 6.5 Medium
Microsoft Office SharePoint Information Disclosure Vulnerability
- Microsoft SharePoint Server Subscription Edition
- Server-side request forgery (SSRF)
- CVSS 7.5 High
Microsoft Office SharePoint Elevation of Privilege Vulnerability
- Microsoft SharePoint Server Subscription Edition
- Server-side request forgery (SSRF)
- CVSS 7.2 High
Microsoft Office SharePoint Remote Code Execution Vulnerability
- Microsoft SharePoint Server Subscription Edition
- CWE-829
- CVSS 8.8 High
Microsoft Office SharePoint Remote Code Execution Vulnerability
- Microsoft SharePoint Server Subscription Edition
- Path traversal
- CVSS 6.5 Medium
Microsoft SharePoint Server Information Disclosure Vulnerability
- Microsoft SharePoint Server Subscription Edition
- CWE-20
- CVSS 4.3 Medium
Microsoft Office SharePoint Elevation of Privilege Vulnerability
- Microsoft SharePoint Server Subscription Edition
- Broken access control
- CVSS 5.7 Medium
Microsoft Office SharePoint Spoofing Vulnerability
- Microsoft SharePoint Server Subscription Edition
- Server-side request forgery (SSRF)
- CVSS 8.1 High
Microsoft Office SharePoint Elevation of Privilege Vulnerability
- Microsoft SharePoint Server Subscription Edition
- Weak cryptography or TLS
- CVSS 6.5 Medium
Microsoft Office SharePoint Information Disclosure Vulnerability
- Microsoft SharePoint Server Subscription Edition
- Broken access control
- CVSS 4.6 Medium
Microsoft Office SharePoint Spoofing Vulnerability
- Microsoft SharePoint Server Subscription Edition
- Cross-site scripting (XSS)
- CVSS 8.8 High
Microsoft Office SharePoint Elevation of Privilege Vulnerability
- Microsoft SharePoint Server Subscription Edition
- Code injection
- CVSS 8.8 High
Microsoft Office SharePoint Elevation of Privilege Vulnerability
- Microsoft SharePoint Server Subscription Edition
- Broken access control
- CVSS 8.8 High
Microsoft Office SharePoint Elevation of Privilege Vulnerability
- Microsoft SharePoint Server Subscription Edition
- Broken access control
- CVSS 8.8 High
Microsoft Office SharePoint Elevation of Privilege Vulnerability
- Microsoft SharePoint Server Subscription Edition
- Broken access control
- CVSS 4.6 Medium
Microsoft Office SharePoint Spoofing Vulnerability
- Microsoft SharePoint Server Subscription Edition
- Cross-site scripting (XSS)
- CVSS 8.8 High
Microsoft Office SharePoint Remote Code Execution Vulnerability
- Microsoft SharePoint Server Subscription Edition
- Broken access control
- CVSS 3.5 Low
Microsoft Office SharePoint Information Disclosure Vulnerability
- Microsoft SharePoint Server Subscription Edition
- Server-side request forgery (SSRF)
- CVSS 6.5 Medium
Microsoft Office SharePoint Information Disclosure Vulnerability
- Microsoft SharePoint Server Subscription Edition
- SQL injection
- CVSS 8.8 High
Microsoft Office SharePoint Elevation of Privilege Vulnerability
- Microsoft SharePoint Server Subscription Edition
- Privilege escalation
- CVSS 3.5 Low
Microsoft Office SharePoint Spoofing Vulnerability
- Microsoft SharePoint Server Subscription Edition
- Cross-site scripting (XSS)
- CVSS 7.3 High
Microsoft Office SharePoint Spoofing Vulnerability
- Microsoft SharePoint Server Subscription Edition
- Cross-site scripting (XSS)
- CVSS 6.5 Medium
Microsoft Office SharePoint Information Disclosure Vulnerability
- Microsoft SharePoint Server Subscription Edition
- Privilege escalation
- CVSS 7.3 High
Microsoft Office SharePoint Spoofing Vulnerability
- Microsoft SharePoint Server Subscription Edition
- Cross-site scripting (XSS)
- CVSS 8.8 High
Microsoft Office SharePoint Remote Code Execution Vulnerability
- Microsoft SharePoint Server Subscription Edition
- Broken access control
- CVSS 8.8 High
Microsoft Office SharePoint Remote Code Execution Vulnerability
- Microsoft SharePoint Server Subscription Edition
- Broken access control
- CVSS 8.8 High
Microsoft Office SharePoint Remote Code Execution Vulnerability
- Microsoft SharePoint Server Subscription Edition
- Broken access control
- CVSS 7.5 High
Microsoft Office SharePoint Remote Code Execution Vulnerability
- Microsoft SharePoint Server Subscription Edition
- Race condition
- CVSS 6.5 Medium
Microsoft Office SharePoint Information Disclosure Vulnerability
- Microsoft SharePoint Server Subscription Edition
- Server-side request forgery (SSRF)
- CVSS 4.6 Medium
Microsoft Office SharePoint Spoofing Vulnerability
- Microsoft SharePoint Server Subscription Edition
- Cross-site scripting (XSS)
- CVSS 8.8 High
Microsoft Office SharePoint Remote Code Execution Vulnerability
- Microsoft SharePoint Server Subscription Edition
- Broken access control
- CVSS 8.8 High
Microsoft Office SharePoint Elevation of Privilege Vulnerability
- Microsoft SharePoint Server Subscription Edition
- SQL injection
- CVSS 4.6 Medium
Microsoft SharePoint Server Spoofing Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- CWE-20
- CVSS 6.5 Medium
Microsoft SharePoint Server Spoofing Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- Hard-coded credentials
- CVSS 6.5 Medium
Microsoft SharePoint Server Spoofing Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- Server-side request forgery (SSRF)
- CVSS 8.8 High
Microsoft SharePoint Server Elevation of Privilege Vulnerability
- Microsoft SharePoint Server Subscription Edition
- Server-side request forgery (SSRF)
- CVSS 9.3 CriticalCritical · CVSS 9+
Microsoft Office SharePoint Spoofing Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- Cross-site scripting (XSS)
- CVSS 8.8 High
Microsoft SharePoint Server Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- Insecure deserialization