Microsoft Corporation Microsoft SharePoint

Name: Microsoft Corporation Microsoft SharePoint
Brand: Microsoft Corporation

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical15high2medium0low

updated 2026-10-28

vulnerabilities (17)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2018-0790US	high8.8	5.25% (93rd)	—	no fix	2018-01-10	≤ Microsoft SharePoint Foundation 2010, Microsoft SharePoint Server 2013 and Microsoft SharePoint Server 2016
CVE-2018-0947US	high8.8	4.53% (92nd)	—	no fix	2018-03-14	≤ Microsoft SharePoint Foundation 2013 SP1 and Microsoft SharePoint Enterprise Server 2016
CVE-2018-0944US	high8.8	4.53% (92nd)	—	no fix	2018-03-14	≤ Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016
CVE-2018-0923US	high8.8	4.53% (92nd)	—	no fix	2018-03-14	≤ Microsoft SharePoint Enterprise Server 2016
CVE-2018-0921US	high8.8	4.53% (92nd)	—	no fix	2018-03-14	≤ Microsoft SharePoint Enterprise Server 2016
CVE-2018-0917US	high8.8	4.53% (92nd)	—	no fix	2018-03-14	≤ Microsoft SharePoint Enterprise Server 2016
CVE-2018-0916US	high8.8	4.53% (92nd)	—	no fix	2018-03-14	≤ Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016
CVE-2018-0915US	high8.8	4.53% (92nd)	—	no fix	2018-03-14	≤ Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016
CVE-2018-0914US	high8.8	4.53% (92nd)	—	no fix	2018-03-14	≤ Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016
CVE-2018-0913US	high8.8	4.53% (92nd)	—	no fix	2018-03-14	≤ Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016
CVE-2018-0912US	high8.8	4.53% (92nd)	—	no fix	2018-03-14	≤ Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016
CVE-2018-0911US	high8.8	4.53% (92nd)	—	no fix	2018-03-14	≤ Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016
CVE-2018-0910US	high8.8	4.53% (92nd)	—	no fix	2018-03-14	≤ Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016
CVE-2018-0909US	high8.8	4.53% (92nd)	—	no fix	2018-03-14	≤ Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016
CVE-2017-11936US	high8.8	4.19% (91st)	—	no fix	2017-12-12	≤ Microsoft SharePoint Enterprise Server 2016
CVE-2017-8551US	medium6.1	3.26% (88th)	—	no fix	2017-06-15	≤ Microsoft Project Server 2013 Service Pack 1
CVE-2017-8514US	medium5.4	3.03% (87th)	—	no fix	2017-06-15	≤ Microsoft SharePoint Enterprise Server 2016

weaknesses (2)

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')15 CVEs
CWE-20Improper Input Validation1 CVEs

sources (1)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)17 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan