Microsoft SharePoint Enterprise Server 2013 SP1

productDE

cpe:/a:microsoft:sharepoint:enterprise_server_2013_sp1

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

1critical1high0medium0low

updated 2026-10-27

vulnerabilities (29)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-21823US	—OT critical	5.56% (93rd)	KEV	no fix	2023-02-14	—
CVE-2023-21715US	high7.3OT critical	12.0% (96th)	KEV	no fix	2023-02-14	—
CVE-2023-21716US	critical9.8	84.8% (100th)	Exploit	no fix	2023-02-14	—
CVE-2023-21742US	—	55.8% (99th)	Exploit	no fix	2023-01-10	—
CVE-2022-44690US	—	82.1% (100th)	—	no fix	2022-12-13	—
CVE-2023-21744US	—	2.92% (87th)	—	no fix	2023-01-10	—
CVE-2022-44693US	—	2.10% (82nd)	—	no fix	2022-12-13	—
CVE-2023-21741US	—	1.84% (79th)	—	no fix	2023-01-10	—
CVE-2022-44713US	—	1.61% (76th)	—	no fix	2022-12-13	—
CVE-2023-21743US	—OT elevated	1.16% (67th)	—	no fix	2023-01-10	—
CVE-2023-21717US	—	1.09% (65th)	—	no fix	2023-02-14	—
CVE-2022-44691US	—	0.94% (61st)	—	no fix	2022-12-13	—
CVE-2023-21734US	—	0.94% (61st)	—	no fix	2023-01-10	—
CVE-2023-21721US	—	0.88% (59th)	—	no fix	2023-02-14	—
CVE-2022-47211US	—	0.87% (59th)	—	no fix	2022-12-13	—
CVE-2022-44696US	—	0.86% (58th)	—	no fix	2022-12-13	—
CVE-2022-44695US	—	0.86% (58th)	—	no fix	2022-12-13	—
CVE-2022-26804US	—	0.85% (58th)	—	no fix	2022-12-13	—
CVE-2022-26806US	—	0.84% (58th)	—	no fix	2022-12-13	—
CVE-2022-26805US	—	0.84% (58th)	—	no fix	2022-12-13	—
CVE-2022-44692US	—	0.83% (57th)	—	no fix	2022-12-13	—
CVE-2022-44694US	—	0.76% (55th)	—	no fix	2022-12-13	—
CVE-2022-47213US	—	0.74% (55th)	—	no fix	2022-12-13	—
CVE-2022-47212US	—	0.74% (55th)	—	no fix	2022-12-13	—
CVE-2023-21737US	—	0.74% (54th)	—	no fix	2023-01-10	—
CVE-2023-21736US	—	0.74% (54th)	—	no fix	2023-01-10	—
CVE-2023-21735US	—	0.74% (54th)	—	no fix	2023-01-10	—
CVE-2023-21738US	—	0.71% (53rd)	—	no fix	2023-01-10	—
CVE-2023-21714US	—	0.60% (48th)	—	no fix	2023-02-14	—

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation16 CVEs
CWE-416Use After Free4 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer2 CVEs
CWE-122Heap-based Buffer Overflow2 CVEs
CWE-125Out-of-bounds Read2 CVEs
CWE-190Integer Overflow or Wraparound2 CVEs
CWE-284Improper Access Control2 CVEs
CWE-451User Interface (UI) Misrepresentation of Critical Information2 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)29 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan