Sharepoint Server CVEs and Security Vulnerabilities

CVE-2022-21987

Microsoft SharePoint Server Spoofing Vulnerability

CVSS 3.1 · 8 High EPSS 2.0% KEV · Not listed

Vendors

Microsoft

Products

Sharepoint Enterprise Server Sharepoint Foundation Sharepoint Server

CVE-2022-21842

Microsoft Word Remote Code Execution Vulnerability

CVSS 3.1 · 7.8 High EPSS 2.4% KEV · Not listed

Vendors

Microsoft

Products

Sharepoint Enterprise Server Sharepoint Server Word

CVE-2022-21837

Microsoft SharePoint Server Remote Code Execution Vulnerability

CVSS 3.1 · 8.3 High EPSS 3.2% KEV · Not listed

Vendors

Microsoft

Products

Sharepoint Foundation Sharepoint Server

CVE-2024-43466

Microsoft SharePoint Server Denial of Service Vulnerability

CVSS 3.1 · 6.5 Medium EPSS 4.5% KEV · Not listed

Vendors

Microsoft

Products

Sharepoint Server

CVE-2024-38228

Microsoft SharePoint Server Remote Code Execution Vulnerability

CVSS 3.1 · 7.2 High EPSS 4.2% KEV · Not listed

Vendors

Microsoft

Products

Sharepoint Server

CVE-2024-38227

Microsoft SharePoint Server Remote Code Execution Vulnerability

CVSS 3.1 · 7.2 High EPSS 8.2% KEV · Not listed

Vendors

Microsoft

Products

Sharepoint Server

CVE-2024-43464

Microsoft SharePoint Server Remote Code Execution Vulnerability

CVSS 3.1 · 7.2 High EPSS 36.3% KEV · Not listed

Vendors

Microsoft

Products

Sharepoint Server

CVE-2024-38018

Microsoft SharePoint Server Remote Code Execution Vulnerability

CVSS 3.1 · 8.8 High EPSS 51.2% KEV · Not listed

Vendors

Microsoft

Products

Sharepoint Server

CVE-2024-33881

An issue was discovered in VirtoSoftware Virto Bulk File Download 5.5.44 for SharePoint 2019. The Virto.SharePoint.FileDownloader/Api/Download.ashx isCompleted method allows an NTLMv2 hash leak via a UNC share pathname in the path parameter.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft Virtosoftware

Products

Sharepoint Server Sharepoint Bulk File Download

CVE-2024-33879

An issue was discovered in VirtoSoftware Virto Bulk File Download 5.5.44 for SharePoint 2019. The Virto.SharePoint.FileDownloader/Api/Download.ashx isCompleted method allows arbitrary file download and deletion via absolute path traversal in the path parameter.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed

Vendors

Microsoft Virtosoftware

Products

Sharepoint Server Sharepoint Bulk File Download

CVE-2021-43876

Microsoft SharePoint Elevation of Privilege Vulnerability

CVSS 3.1 · 8.8 High EPSS 2.0% KEV · Not listed

Vendors

Microsoft

Products

Sharepoint Enterprise Server Sharepoint Server

CVE-2021-43242

Microsoft SharePoint Server Spoofing Vulnerability

CVSS 3.1 · 7.6 High EPSS 1.3% KEV · Not listed

Vendors

Microsoft

Products

Sharepoint Enterprise Server Sharepoint Foundation Sharepoint Server

CVE-2021-42320

Microsoft SharePoint Server Spoofing Vulnerability

CVSS 3.1 · 8 High EPSS 1.6% KEV · Not listed

Vendors

Microsoft

Products

Sharepoint Enterprise Server Sharepoint Server

CVE-2021-42309

Microsoft SharePoint Server Remote Code Execution Vulnerability

CVSS 3.1 · 8.8 High EPSS 2.9% KEV · Not listed

Vendors

Microsoft

Products

Sharepoint Enterprise Server Sharepoint Foundation Sharepoint Server

CVE-2021-42294

Microsoft SharePoint Server Remote Code Execution Vulnerability

CVSS 3.1 · 7.2 High EPSS 2.3% KEV · Not listed

Vendors

Microsoft

Products

Sharepoint Enterprise Server Sharepoint Foundation Sharepoint Server

CVE-2021-41344

Microsoft SharePoint Server Remote Code Execution Vulnerability

CVSS 3.1 · 8.1 High EPSS 6.5% KEV · Not listed

Vendors

Microsoft

Products

Sharepoint Enterprise Server Sharepoint Foundation Sharepoint Server

CVE-2021-40486

Microsoft Word Remote Code Execution Vulnerability

CVSS 3.1 · 7.8 High EPSS 6.0% KEV · Not listed

Vendors

Microsoft

Products

Office Office Online Server Office Web Apps Server and 3 more

CVE-2021-40484

Microsoft SharePoint Server Spoofing Vulnerability

CVSS 3.1 · 7.6 High EPSS 1.4% KEV · Not listed

Vendors

Microsoft

Products

Sharepoint Enterprise Server Sharepoint Foundation Sharepoint Server

CVE-2021-40483

Microsoft SharePoint Server Spoofing Vulnerability

CVSS 3.1 · 7.6 High EPSS 1.4% KEV · Not listed

Vendors

Microsoft

Products

Sharepoint Server

CVE-2021-40482

Microsoft SharePoint Server Information Disclosure Vulnerability

CVSS 3.1 · 5.3 Medium EPSS 2.3% KEV · Not listed

Vendors

Microsoft

Products

Sharepoint Server

Search vulnerabilities

Microsoft SharePoint Server Spoofing Vulnerability

Microsoft Word Remote Code Execution Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft SharePoint Server Denial of Service Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft SharePoint Elevation of Privilege Vulnerability

Microsoft SharePoint Server Spoofing Vulnerability

Microsoft SharePoint Server Spoofing Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft Word Remote Code Execution Vulnerability

Microsoft SharePoint Server Spoofing Vulnerability

Microsoft SharePoint Server Spoofing Vulnerability

Microsoft SharePoint Server Information Disclosure Vulnerability