Skip to content

Known vulnerabilities in Microsoft SharePoint Server 2019

Is your version affected?

CVE Summary Score Published
CVE-2020-16948 An information disclosure vulnerability exists when Microsoft SharePoint Server fails to properly handle objects in… 6.5 Medium Oct 16, 2020
CVE-2020-16946 A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a… 8.7 High Oct 16, 2020
CVE-2020-16945 A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a… 8.7 High Oct 16, 2020
CVE-2020-16944 This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an… 8.7 High Oct 16, 2020
CVE-2020-16942 An information disclosure vulnerability exists when Microsoft SharePoint Server improperly discloses its folder… 4.1 Medium Oct 16, 2020
CVE-2020-16941 An information disclosure vulnerability exists when Microsoft SharePoint Server improperly discloses its folder… 4.1 Medium Oct 16, 2020
CVE-2020-1595 A remote code execution vulnerability exists in Microsoft SharePoint where APIs aren't properly protected from unsafe… 9.9 Critical Sep 11, 2020
CVE-2020-1576 A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source… 8.5 High Sep 11, 2020
CVE-2020-1523 <p>A tampering vulnerability exists when Microsoft SharePoint Server fails to properly handle profile data 8.9 High Sep 11, 2020
CVE-2020-1514 A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a… 5.4 Medium Sep 11, 2020
CVE-2020-1482 A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a… 6.3 Medium Sep 11, 2020
CVE-2020-1460 A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and… 8.6 High Sep 11, 2020
CVE-2020-1453 A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source… 8.6 High Sep 11, 2020
CVE-2020-1452 A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source… 8.6 High Sep 11, 2020
CVE-2020-1440 <p>A tampering vulnerability exists when Microsoft SharePoint Server fails to properly handle profile data 6.3 Medium Sep 11, 2020
CVE-2020-1345 A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a… 7.4 High Sep 11, 2020
CVE-2020-1338 A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in… 7.8 High Sep 11, 2020
CVE-2020-1335 A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle… 7.8 High Sep 11, 2020
CVE-2020-1227 A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a… 5.4 Medium Sep 11, 2020
CVE-2020-1218 A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in… 7.8 High Sep 11, 2020
CVE-2020-1210 A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source… 9.9 Critical Sep 11, 2020
CVE-2020-1205 A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web… 4.6 Medium Sep 11, 2020
CVE-2020-1200 A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source… 8.6 High Sep 11, 2020
CVE-2020-1198 A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a… 7.4 High Sep 11, 2020
CVE-2020-1583 An information disclosure vulnerability exists when Microsoft Word improperly discloses the contents of its memory 8.8 High Aug 17, 2020

Other Microsoft products