VendorsMicrosoftsharepoint_enterprise_serverall versions
Vulnerabilities

Microsoft Sharepoint Enterprise Server

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

256CVEs
CVE-2022-21840
Microsoft Office Remote Code Execution Vulnerability
Published 2022-01-11 · Modified
8.8EPSS 0.031
CVE-2021-26420
Microsoft SharePoint Server Remote Code Execution Vulnerability
Published 2021-06-08 · Modified
8.8EPSS 0.030
CVE-2020-1295
An elevation of privilege vulnerability exists in Microsoft SharePoint, aka 'Microsoft SharePoint Elevation of Privilege Vulnerability'.
Published 2020-06-09 · Modified
8.8EPSS 0.030
CVE-2021-42309
Microsoft SharePoint Server Remote Code Execution Vulnerability
Published 2021-12-15 · Modified
8.8EPSS 0.027
CVE-2017-11876
Microsoft Project Server and Microsoft SharePoint Enterprise Server 2016 allow an attacker to use cross-site forgery to read content that they are not authorized to read, use the victim's identity to take actions on the web application on behalf of the victim, such as change permissions and delete content, and inject malicious content in the browser of the victim, aka "Microsoft Project Server Elevation of Privilege Vulnerability".
Published 2017-11-15 · Modified
8.8EPSS 0.025
CVE-2021-24072
Microsoft SharePoint Server Remote Code Execution Vulnerability
Published 2021-02-25 · Modified
8.8EPSS 0.024
CVE-2022-38009
Microsoft SharePoint Server Remote Code Execution Vulnerability
Published 2022-09-13 · Modified
8.8EPSS 0.021
CVE-2022-38008
Microsoft SharePoint Server Remote Code Execution Vulnerability
Published 2022-09-13 · Modified
8.8EPSS 0.020
CVE-2022-44693
Microsoft SharePoint Server Remote Code Execution Vulnerability
Published 2022-12-13 · Modified
8.8EPSS 0.020
CVE-2021-43876
Microsoft SharePoint Elevation of Privilege Vulnerability
Published 2021-12-29 · Modified
8.8EPSS 0.019
CVE-2025-47172
Microsoft SharePoint Server Remote Code Execution Vulnerability
Published 2025-06-10 · Analyzed
8.8EPSS 0.017
CVE-2022-41062
Microsoft SharePoint Server Remote Code Execution Vulnerability
Published 2022-11-09 · Modified
8.8EPSS 0.016
CVE-2020-1576
Microsoft SharePoint Remote Code Execution Vulnerability
Published 2020-09-11 · Modified
8.8EPSS 0.016
CVE-2019-1261
A spoofing vulnerability exists in Microsoft SharePoint when it improperly handles requests to authorize applications, resulting in cross-site request forgery (CSRF).To exploit this vulnerability, an attacker would need to create a page specifically designed to cause a cross-site request, aka 'Microsoft SharePoint Spoofing Vulnerability'. This CVE ID is unique from CVE-2019-1259.
Published 2019-09-11 · Modified
8.8EPSS 0.016
CVE-2023-21717
Microsoft SharePoint Server Elevation of Privilege Vulnerability
Published 2023-02-14 · Modified
8.8EPSS 0.011
CVE-2020-16944
Microsoft SharePoint Reflective XSS Vulnerability
Published 2020-10-16 · Modified
8.7EPSS 0.018
CVE-2020-16945
Microsoft Office SharePoint XSS Vulnerability
Published 2020-10-16 · Modified
8.7EPSS 0.017
CVE-2020-16946
Microsoft Office SharePoint XSS Vulnerability
Published 2020-10-16 · Modified
8.7EPSS 0.016
CVE-2020-16952
Microsoft SharePoint Remote Code Execution Vulnerability
Published 2020-10-16 · Modified
8.6EPSS 0.711
CVE-2025-47994
Microsoft Office Elevation of Privilege Vulnerability
Published 2025-07-08 · Analyzed
8.6EPSS 0.028
CVE-2020-1452
Microsoft SharePoint Remote Code Execution Vulnerability
Published 2020-09-11 · Modified
8.6EPSS 0.022
CVE-2020-1453
Microsoft SharePoint Remote Code Execution Vulnerability
Published 2020-09-11 · Modified
8.6EPSS 0.022
CVE-2020-1200
Microsoft SharePoint Remote Code Execution Vulnerability
Published 2020-09-11 · Modified
8.6EPSS 0.021
CVE-2020-16951
Microsoft SharePoint Remote Code Execution Vulnerability
Published 2020-10-16 · Modified
8.6EPSS 0.014
CVE-2025-53733
Microsoft Word Remote Code Execution Vulnerability
Published 2025-08-12 · Analyzed
8.4EPSS 0.005
CVE-2021-31948
Microsoft SharePoint Server Spoofing Vulnerability
Published 2021-06-08 · Modified
8.1EPSS 0.013
CVE-2021-1719
Microsoft SharePoint Elevation of Privilege Vulnerability
Published 2021-01-12 · Modified
8.0EPSS 0.022
CVE-2021-1712
Microsoft SharePoint Elevation of Privilege Vulnerability
Published 2021-01-12 · Modified
8.0EPSS 0.022
CVE-2021-1726
Microsoft SharePoint Server Spoofing Vulnerability
Published 2021-02-25 · Modified
8.0EPSS 0.021
CVE-2022-21987
Microsoft SharePoint Server Spoofing Vulnerability
Published 2022-02-09 · Modified
8.0EPSS 0.020
CVE-2021-42320
Microsoft SharePoint Server Spoofing Vulnerability
Published 2021-12-15 · Modified
8.0EPSS 0.015
CVE-2020-1147
A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability'.
Published 2020-07-14 · Analyzed
7.8KEV2 PoCEPSS 0.940
CVE-2021-40486
Microsoft Word Remote Code Execution Vulnerability
Published 2021-10-13 · Modified
7.8EPSS 0.060
CVE-2020-16929
Microsoft Excel Remote Code Execution Vulnerability
Published 2020-10-16 · Modified
7.8EPSS 0.037
CVE-2021-1714
Microsoft Excel Remote Code Execution Vulnerability
Published 2021-01-12 · Modified
7.8EPSS 0.031
CVE-2021-40485
Microsoft Excel Remote Code Execution Vulnerability
Published 2021-10-13 · Modified
7.8EPSS 0.027
CVE-2021-40442
Microsoft Excel Remote Code Execution Vulnerability
Published 2021-11-10 · Modified
7.8EPSS 0.023
CVE-2022-21842
Microsoft Word Remote Code Execution Vulnerability
Published 2022-01-11 · Modified
7.8EPSS 0.023
CVE-2022-41061
Microsoft Word Remote Code Execution Vulnerability
Published 2022-11-09 · Modified
7.8EPSS 0.012
CVE-2025-27747
Microsoft Word Remote Code Execution Vulnerability
Published 2025-04-08 · Analyzed
7.8EPSS 0.008
← Prev3 / 7Next →