Microsoft Sharepoint Server Subscription Edition vulnerabilities, page 3
272 vulnerabilities
Known vulnerabilities in Microsoft Sharepoint Server Subscription Edition, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2021-42309microsoft · microsoft sharepoint enterprise server 2016 +6 moreMicrosoft SharePoint Server Remote Code Execution VulnerabilityEPSS2.93%HighCVE-2021-43242microsoft · microsoft sharepoint enterprise server 2016 +6 moreMicrosoft SharePoint Server Spoofing VulnerabilityEPSS1.30%HighCVE-2025-21400microsoft · microsoft sharepoint enterprise server 2016 +3 moreMicrosoft SharePoint Server Remote Code Execution VulnerabilityEPSS34.25%HighCVE-2025-21348microsoft · microsoft sharepoint enterprise server 2016 +3 moreMicrosoft SharePoint Server Remote Code Execution VulnerabilityEPSS1.83%MediumCVE-2025-21393microsoft · microsoft sharepoint enterprise server 2016 +3 moreMicrosoft SharePoint Server Spoofing VulnerabilityEPSS1.06%HighCVE-2025-21344microsoft · microsoft sharepoint enterprise server 2016 +3 moreMicrosoft SharePoint Server Remote Code Execution VulnerabilityEPSS0.88%HighCVE-2025-54897microsoft · microsoft sharepoint enterprise server 2016 +3 moreMicrosoft SharePoint Remote Code Execution VulnerabilityDeserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.EPSS21.75%HighCVE-2025-59237microsoft · microsoft sharepoint enterprise server 2016 +3 moreMicrosoft SharePoint Remote Code Execution VulnerabilityDeserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.EPSS2.46%HighCVE-2025-59228microsoft · microsoft sharepoint enterprise server 2016 +3 moreMicrosoft SharePoint Remote Code Execution VulnerabilityImproper input validation in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.EPSS1.36%HighCVE-2025-62204microsoft · microsoft sharepoint enterprise server 2016 +3 moreMicrosoft SharePoint Remote Code Execution VulnerabilityDeserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.EPSS2.21%HighCVE-2025-47166microsoft · microsoft sharepoint enterprise server 2016 +4 moreMicrosoft SharePoint Server Remote Code Execution VulnerabilityDeserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.EPSS21.64%HighCVE-2025-47172microsoft · microsoft sharepoint enterprise server 2016 +4 moreMicrosoft SharePoint Server Remote Code Execution VulnerabilityImproper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.EPSS1.75%HighCVE-2025-47163microsoft · microsoft sharepoint enterprise server 2016 +4 moreMicrosoft SharePoint Server Remote Code Execution VulnerabilityDeserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.EPSS20.92%MediumCVE-2025-53771microsoft · microsoft sharepoint enterprise server 2016 +3 moreMicrosoft SharePoint Server Spoofing VulnerabilityImproper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.EPSS99.89%HighCVE-2025-53760microsoft · microsoft sharepoint enterprise server 2016 +3 moreMicrosoft SharePoint Elevation of Privilege VulnerabilityServer-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.EPSS18.93%CriticalCVE-2025-53770microsoft · microsoft sharepoint enterprise server 2016 +3 moreMicrosoft SharePoint Server Remote Code Execution VulnerabilityDeserialization of untrusted data in on-premises Microsoft SharePoint Server allows an unauthorized attacker to execute code over a network.
Microsoft is aware that an exploit for CVE-2025-53770 exists in the wild.
Microsoft is preparing and fully testing a comprehensive update to address this vulnerability. In the meantime, please make sure that the mitigation provided in this CVE documentation is in place so that you are protected from exploitation.KEVRansomwareEPSS100.00%HighCVE-2025-29793microsoft · microsoft sharepoint enterprise server 2016 +4 moreMicrosoft SharePoint Remote Code Execution VulnerabilityDeserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.EPSS23.63%HighCVE-2025-29794microsoft · microsoft sharepoint enterprise server 2016 +4 moreMicrosoft SharePoint Remote Code Execution VulnerabilityImproper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.EPSS4.76%HighCVE-2025-29976microsoft · microsoft sharepoint enterprise server 2016 +3 moreMicrosoft SharePoint Server Elevation of Privilege VulnerabilityImproper privilege management in Microsoft Office SharePoint allows an authorized attacker to elevate privileges locally.EPSS0.64%CriticalCVE-2025-64672microsoft · microsoft sharepoint server subscription edition +1 moreMicrosoft SharePoint Server Spoofing VulnerabilityImproper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.EPSS1.02%