Office SharePoint
by Microsoft
CVEs (284)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-69615 | Low | 0.23 | 3.5 | 0.00 | Sep 8, 2026 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | ||
| CVE-2023-23395 | Low | 0.20 | 3.1 | 0.01 | Mar 14, 2023 | Microsoft SharePoint Server Spoofing Vulnerability | ||
| CVE-2026-56164 | Med | 0.14 | 5.3 | 0.01 | KEV | Jul 14, 2026 | Missing authentication for critical function in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network. | |
| CVE-2026-58644 | Cri | 0.12 | 9.8 | 0.16 | KEV | Jul 14, 2026 | Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network. |
- risk 0.23cvss 3.5epss 0.00
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
- risk 0.20cvss 3.1epss 0.01
Microsoft SharePoint Server Spoofing Vulnerability
- risk 0.14cvss 5.3epss 0.01
Missing authentication for critical function in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network.
- risk 0.12cvss 9.8epss 0.16
Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.
Page 15 of 15