Microsoft SharePoint vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
494 matching records
- High7.9An improper access control vulnerability exists in the multi-factor authentication (MFA) functionality of ManageEngine SharePoint Manager Plus (SPMP).Check if you run itEPSS 0.34%Oct 30, 2026
- High8.5A stored cross-site scripting (XSS) vulnerability exists in the chart feature of SharePoint Manager Plus (SPMP) due to improper sanitization and HTML encoding of user-controlled daCheck if you run itEPSS 0.24%Oct 30, 2026
- High8.8Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.Check if you run itEPSS 0.82%Oct 15, 2026
- Medium6.5Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.Check if you run itEPSS 0.92%Oct 13, 2026
- High8.8Microsoft Office SharePoint Elevation of Privilege VulnerabilityCheck if you run itEPSS 1.08%Oct 13, 2026
- High7.5Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.61%Oct 13, 2026
- High7.2Inclusion of functionality from untrusted control sphere in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.Check if you run itEPSS 1.01%Oct 13, 2026
- High8.8Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.Check if you run itEPSS 1.16%Oct 13, 2026
- Medium6.5Improper input validation in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.Check if you run itEPSS 1.09%Oct 13, 2026
- Medium4.3Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.49%Oct 13, 2026
- Medium5.7Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over an adjacent network.Check if you run itEPSS 0.42%Oct 13, 2026
- High8.1Improper verification of cryptographic signature in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 0.67%Oct 13, 2026
- Medium6.5Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.Check if you run itEPSS 0.88%Oct 13, 2026
- Medium4.6Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a networkCheck if you run itEPSS 0.41%Oct 13, 2026
- High8.8Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 1.02%Oct 13, 2026
- High8.8Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.79%Oct 13, 2026
- High8.8Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.81%Oct 13, 2026
- High8.8Improper access control in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.81%Oct 13, 2026
- Medium4.6Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a networkCheck if you run itEPSS 0.41%Oct 13, 2026
- High8.1Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing…Check if you run itEPSS 0.50%Oct 13, 2026
- Medium6.8Observable discrepancy in Microsoft Office SharePoint allows an authorized attacker to perform tampering over a network.Check if you run itEPSS 0.53%Oct 13, 2026
- High8.8Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 0.80%Oct 13, 2026
- High8.8No cwe for this issue in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.85%Oct 13, 2026
- Medium4.6Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a networkCheck if you run itEPSS 0.36%Oct 13, 2026
- Medium4.6Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a networkCheck if you run itEPSS 0.27%Oct 13, 2026