Microsoft Corp Microsoft SharePoint Server

Name: Microsoft Corp Microsoft SharePoint Server
Brand: Microsoft Corp

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

critical

by severity

0critical62high33medium3low

updated 2026-10-28

vulnerabilities (103)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-1147US	high7.8OT critical	94.0% (100th)	KEV	no fix	2020-07-14	≤ 2010 SP2
CVE-2026-45659US	—OT critical	80.2% (100th)	KEV	no fix	2026-05-22	≤ 2019
CVE-2014-1761US	high9.3OT critical	77.7% (100th)	KEV	no fix	2014-03-25	3 versions
CVE-2016-3357US	high7.8	54.8% (99th)	Exploit	no fix	2016-09-14	2 versions
CVE-2022-35823US	—	53.8% (99th)	—	no fix	2022-09-13	≤ 2013 SP1
CVE-2022-37961US	—	50.9% (99th)	—	no fix	2022-09-13	≤ 2013 SP1
CVE-2015-6038US	high9.3	35.6% (98th)	—	no fix	2015-11-11	3 versions
CVE-2016-3234US	medium5.5	26.5% (98th)	—	no fix	2016-06-16	2 versions
CVE-2016-3282US	high7.8	26.3% (98th)	—	no fix	2016-07-13	2 versions
CVE-2017-0030US	high7.8	26.0% (98th)	—	no fix	2017-03-17	≤ 2010 SP2
CVE-2018-0797US	high7.8	24.7% (98th)	—	no fix	2018-01-10	≤ 2010 SP2
CVE-2015-6093US	high9.3	23.2% (98th)	—	no fix	2015-11-11	2 versions
CVE-2015-2558US	high9.3	23.0% (98th)	—	no fix	2015-10-14	3 versions
CVE-2015-2555US	high9.3	23.0% (98th)	—	no fix	2015-10-14	2 versions
CVE-2017-0027US	medium4.7	22.6% (98th)	—	no fix	2017-03-17	≤ 2013 SP1
CVE-2017-8501US	high7.8	22.5% (98th)	—	no fix	2017-07-11	2 versions
CVE-2016-7233US	medium6.5	22.4% (98th)	—	no fix	2016-11-10	≤ 2013 SP1
CVE-2016-7234US	high7.8	22.3% (98th)	—	no fix	2016-11-10	2 versions
CVE-2016-0134US	high7.8	22.3% (98th)	—	no fix	2016-03-09	2 versions
CVE-2017-8512US	high8.8	22.1% (98th)	—	no fix	2017-06-15	≤ 2013 SP1
CVE-2019-0585US	high8.8	22.0% (98th)	—	no fix	2019-01-08	≤ 2010 SP2
CVE-2018-8161US	high7.8	21.3% (98th)	—	no fix	2018-05-09	2 versions
CVE-2016-0127US	high7.8	21.1% (98th)	—	no fix	2016-04-12	2 versions
CVE-2016-7236US	high7.8	20.7% (98th)	—	no fix	2016-11-10	≤ 2010 SP2
CVE-2017-8511US	high7.8	20.6% (98th)	—	no fix	2017-06-15	≤ 2013 SP1
CVE-2015-6094US	high9.3	20.6% (98th)	—	no fix	2015-11-11	≤ 2013 SP1
CVE-2016-3281US	high7.8	20.4% (97th)	—	no fix	2016-07-13	≤ 2010 SP2
CVE-2020-1439US	high8.8	20.3% (97th)	—	no fix	2020-07-14	≤ 2010 SP2
CVE-2016-3365US	high7.8	19.9% (97th)	—	no fix	2016-09-14	3 versions
CVE-2017-0254US	high7.8	19.8% (97th)	—	no fix	2017-05-12	≤ 2013 SP1
CVE-2019-1331US	high8.8	19.7% (97th)	—	no fix	2019-10-10	≤ 2010 SP2
CVE-2018-8504US	high8.8	19.7% (97th)	—	no fix	2018-10-10	≤ 2010 SP2
CVE-2016-0140US	high7.8	19.4% (97th)	—	no fix	2016-05-11	≤ 2010 SP2
CVE-2016-0053US	high7.8	19.1% (97th)	—	no fix	2016-02-10	≤ 2013 SP1
CVE-2016-0052US	high7.8	19.1% (97th)	—	no fix	2016-02-10	≤ 2013 SP1
CVE-2016-0022US	high7.8	19.1% (97th)	—	no fix	2016-02-10	≤ 2013 SP1
CVE-2018-8577US	high7.8	19.1% (97th)	—	no fix	2018-11-14	≤ 2010 SP2
CVE-2018-8539US	high7.8	19.1% (97th)	—	no fix	2018-11-14	≤ 2010 SP2
CVE-2018-1028US	high8.8	18.9% (97th)	—	no fix	2018-04-12	≤ 2013 SP1
CVE-2016-3358US	high7.8	18.4% (97th)	—	no fix	2016-09-14	3 versions
CVE-2017-8509US	high8.8	18.2% (97th)	—	no fix	2017-06-15	≤ 2013 SP1
CVE-2018-0922US	high7.8	18.0% (97th)	—	no fix	2018-03-14	≤ 2010 SP2
CVE-2014-0260US	high9.3	17.8% (97th)	—	no fix	2014-01-15	3 versions
CVE-2016-3362US	high7.8	17.5% (97th)	—	no fix	2016-09-14	3 versions
CVE-2016-3360US	high7.8	17.2% (97th)	—	no fix	2016-09-14	≤ 2013 SP1
CVE-2017-8513US	high7.8	17.1% (97th)	—	no fix	2017-06-15	≤ 2007 SP3
CVE-2017-8631US	high7.8	17.0% (97th)	—	no fix	2017-09-13	2 versions
CVE-2016-0025US	high7.3	16.7% (97th)	—	no fix	2016-06-16	2 versions
CVE-2017-0006US	high7.8	16.6% (97th)	—	no fix	2017-03-17	≤ 2007 SP3
CVE-2016-3279US	medium5.5	16.4% (97th)	—	no fix	2016-07-13	≤ 2010 SP2

showing 50 of 103

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer42 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')19 CVEs
CWE-20Improper Input Validation10 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor7 CVEs
CWE-19CWE-195 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')5 CVEs
CWE-264CWE-2644 CVEs
CWE-502Deserialization of Untrusted Data4 CVEs

sources (1)

Which sources assert this record, and when.

RUBDU (FSTEC Data Security Threats Database)103 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan