Microsoft Sharepoint Server Subscription Edition vulnerabilities, page 2
272 vulnerabilities
Known vulnerabilities in Microsoft Sharepoint Server Subscription Edition, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2026-70259microsoftmicrosoft sharepoint server subscription edition+1
EPSS score0.81%
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.CVE-2026-70251microsoftmicrosoft sharepoint server subscription edition+1EPSS score0.54%
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.CVE-2026-70246microsoftmicrosoft sharepoint server subscription edition+1EPSS score0.75%
Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.CVE-2026-70217microsoftmicrosoft sharepoint server subscription edition+1EPSS score0.86%
Improper access control in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.CVE-2026-70202microsoftmicrosoft sharepoint server subscription edition+1EPSS score0.51%
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.CVE-2026-69943microsoftmicrosoft sharepoint server subscription edition+1EPSS score0.98%
Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.CVE-2026-105720microsoftmicrosoft sharepoint server subscription edition+1EPSS score0.43%
Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.CVE-2026-105719microsoftmicrosoft sharepoint server subscription edition+1EPSS score0.96%
Improper input validation in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.CVE-2026-105713microsoftmicrosoft sharepoint server subscription edition+1EPSS score0.37%
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over an adjacent network.CVE-2026-105013microsoftmicrosoft sharepoint server subscription edition+1EPSS score0.84%
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.CVE-2026-102866microsoftmicrosoft sharepoint server subscription edition+1EPSS score0.54%
Improper verification of cryptographic signature in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network.CVE-2026-102865microsoftmicrosoft sharepoint server subscription edition+1EPSS score0.77%
Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.CVE-2026-102864microsoftmicrosoft sharepoint server subscription edition+1EPSS score0.36%
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.CVE-2026-102863microsoftmicrosoft sharepoint server subscription edition+1EPSS score0.89%
Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.CVE-2026-102862microsoftmicrosoft sharepoint server subscription edition+1EPSS score0.70%
Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.CVE-2026-102861microsoftmicrosoft sharepoint server subscription edition+1EPSS score0.70%
Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.CVE-2026-102860microsoftmicrosoft sharepoint server subscription edition+1EPSS score0.70%
Improper access control in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.CVE-2026-102859microsoftmicrosoft sharepoint server subscription edition+1EPSS score0.36%
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.CVE-2021-42294microsoftmicrosoft sharepoint enterprise server 2013 service pack 1+8EPSS score2.31%
Microsoft SharePoint Server Remote Code Execution VulnerabilityCVE-2021-42320microsoftmicrosoft sharepoint enterprise server 2016+4EPSS score1.60%
Microsoft SharePoint Server Spoofing Vulnerability