[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fzd5RFSHgXSqrlaRU29sSbqmFbdc3VZ6xCTTP4iJKILA":3,"g5a-family:microsoft\u002Fsharepoint_enterprise_server":138,"g5a-ex:microsoft\u002Fsharepoint_enterprise_server@*":144},{"success":4,"data":5},true,{"product":6,"versions":29,"topVulnerabilitiesByEpss":34,"kevVulnerabilities":93,"seoMetadata":116,"meta":135},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":28},"microsoft","sharepoint_enterprise_server",4,246,5,"2025-09-09",[14,19,22,25],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},"2010",1,0,false,{"version":20,"cve_count":21,"kev_count":16,"has_kev":4},"2013",104,{"version":23,"cve_count":24,"kev_count":11,"has_kev":4},"2016",236,{"version":26,"cve_count":27,"kev_count":17,"has_kev":18},"2019",3,"Sharepoint Enterprise Server by Microsoft is a technology product with 4 tracked versions and 246 known security vulnerabilities including 5 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[30,31,32,33],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},{"version":20,"cve_count":21,"kev_count":16,"has_kev":4},{"version":23,"cve_count":24,"kev_count":11,"has_kev":4},{"version":26,"cve_count":27,"kev_count":17,"has_kev":18},[35,43,50,57,63,68,73,78,84,89],{"cveId":36,"description":37,"publishedDate":38,"cvssScore":39,"cvssVersion":40,"severity":41,"isKev":4,"epssScore":42},"CVE-2019-0604","A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0594.","2019-03-05",9.8,"v3.1","Critical",0.99913,{"cveId":44,"description":45,"publishedDate":46,"cvssScore":47,"cvssVersion":40,"severity":48,"isKev":4,"epssScore":49},"CVE-2025-49706","Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.","2025-07-08",6.5,"Medium",0.99095,{"cveId":51,"description":52,"publishedDate":53,"cvssScore":54,"cvssVersion":40,"severity":55,"isKev":4,"epssScore":56},"CVE-2020-1147","A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability'.","2020-07-14",7.8,"High",0.93966,{"cveId":58,"description":59,"publishedDate":60,"cvssScore":61,"cvssVersion":40,"severity":55,"isKev":4,"epssScore":62},"CVE-2023-24955","Microsoft SharePoint Server Remote Code Execution Vulnerability","2023-05-09",7.2,0.84974,{"cveId":64,"description":65,"publishedDate":66,"cvssScore":39,"cvssVersion":40,"severity":41,"isKev":18,"epssScore":67},"CVE-2023-21716","Microsoft Word Remote Code Execution Vulnerability","2023-02-14",0.848,{"cveId":69,"description":70,"publishedDate":71,"cvssScore":54,"cvssVersion":40,"severity":55,"isKev":4,"epssScore":72},"CVE-2017-11826","Microsoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010, Web Applications, Office Web Apps Server 2010 and 2013, Word Viewer, Word 2007, 2010, 2013 and 2016, Word Automation Services, and Office Online Server allow remote code execution when the software fails to properly handle objects in memory.","2017-10-13",0.81333,{"cveId":74,"description":59,"publishedDate":75,"cvssScore":76,"cvssVersion":40,"severity":55,"isKev":18,"epssScore":77},"CVE-2022-38053","2022-10-11",8.8,0.76397,{"cveId":79,"description":80,"publishedDate":81,"cvssScore":82,"cvssVersion":40,"severity":55,"isKev":18,"epssScore":83},"CVE-2020-16952","\u003Cp>A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SharePoint application pool and the SharePoint server farm account.\u003C\u002Fp>\n\u003Cp>Exploitation of this vulnerability requires that a user uploads a specially crafted SharePoint application package to an affected version of SharePoint.\u003C\u002Fp>\n\u003Cp>The security update addresses the vulnerability by correcting how SharePoint checks the source markup of application packages.\u003C\u002Fp>\n","2020-10-16",8.6,0.71095,{"cveId":85,"description":86,"publishedDate":87,"cvssScore":76,"cvssVersion":40,"severity":55,"isKev":18,"epssScore":88},"CVE-2020-1181","A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net web controls, aka 'Microsoft SharePoint Server Remote Code Execution Vulnerability'.","2020-06-09",0.69303,{"cveId":90,"description":91,"publishedDate":60,"cvssScore":47,"cvssVersion":40,"severity":48,"isKev":18,"epssScore":92},"CVE-2023-24950","Microsoft SharePoint Server Spoofing Vulnerability",0.67452,[94,99,104,109,113],{"cveId":44,"description":45,"publishedDate":46,"cvssScore":47,"severity":48,"isKev":4,"epssScore":49,"cisaVulnName":95,"cisaDateAdded":96,"cisaShortDescription":97,"cisaRequiredAction":98},"Microsoft SharePoint Improper Authentication Vulnerability","2025-07-22","Microsoft SharePoint contains an improper authentication vulnerability that allows an authorized attacker to perform spoofing over a network. Successfully exploitation could allow an attacker to view sensitive information and make some changes to disclosed information. This vulnerability could be chained with CVE-2025-49704. CVE-2025-53771 is a patch bypass for CVE-2025-49706, and the updates for CVE-2025-53771 include more robust protection than those for CVE-2025-49706.","Disconnect public-facing versions of SharePoint Server that have reached their end-of-life (EOL) or end-of-service (EOS) to include SharePoint Server 2013 and earlier versions. For supported versions, please follow the mitigations according to CISA (URL listed below in Notes) and vendor instructions (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.",{"cveId":58,"description":59,"publishedDate":60,"cvssScore":61,"severity":55,"isKev":4,"epssScore":62,"cisaVulnName":100,"cisaDateAdded":101,"cisaShortDescription":102,"cisaRequiredAction":103},"Microsoft SharePoint Server Code Injection Vulnerability","2024-03-26","Microsoft SharePoint Server contains a code injection vulnerability that allows an authenticated attacker with Site Owner privileges to execute code remotely.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"cveId":69,"description":70,"publishedDate":71,"cvssScore":54,"severity":55,"isKev":4,"epssScore":72,"cisaVulnName":105,"cisaDateAdded":106,"cisaShortDescription":107,"cisaRequiredAction":108},"Microsoft Office Remote Code Execution Vulnerability","2022-03-03","A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user.","Apply updates per vendor instructions.",{"cveId":36,"description":37,"publishedDate":38,"cvssScore":39,"severity":41,"isKev":4,"epssScore":42,"cisaVulnName":110,"cisaDateAdded":111,"cisaShortDescription":112,"cisaRequiredAction":108},"Microsoft SharePoint Remote Code Execution Vulnerability","2021-11-03","Microsoft SharePoint fails to check the source markup of an application package. An attacker who successfully exploits the vulnerability could run remote code in the context of the SharePoint application pool and the SharePoint server farm account.",{"cveId":51,"description":52,"publishedDate":53,"cvssScore":54,"severity":55,"isKev":4,"epssScore":56,"cisaVulnName":114,"cisaDateAdded":111,"cisaShortDescription":115,"cisaRequiredAction":108},"Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability","Microsoft .NET Framework, Microsoft SharePoint, and Visual Studio contain a remote code execution vulnerability when the software fails to check the source markup of XML file input. Successful exploitation allows an attacker to execute code in the context of the process responsible for deserialization of the XML content.",{"title":117,"metaDescription":118,"keywords":119,"structuredData":120},"Sharepoint Enterprise Server by Microsoft - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Sharepoint Enterprise Server by Microsoft covering 4 versions with 246 tracked vulnerabilities including 1 critical and 3 high-severity issues and 5 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Sharepoint Enterprise Server vulnerabilities, Sharepoint Enterprise Server security, Sharepoint Enterprise Server CVE, Microsoft Sharepoint Enterprise Server, Sharepoint Enterprise Server threat intelligence, Microsoft security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Sharepoint Enterprise Server KEV, Sharepoint Enterprise Server exploited vulnerabilities",{"@context":121,"@type":122,"name":123,"description":118,"url":124,"manufacturer":125,"applicationCategory":129,"softwareVersion":130,"mainEntity":131},"https:\u002F\u002Fschema.org","SoftwareApplication","Sharepoint Enterprise Server","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fmicrosoft\u002Fsharepoint_enterprise_server",{"@type":126,"name":127,"url":128},"Organization","Microsoft","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fmicrosoft","Security Software","4 versions tracked",{"@type":132,"name":133,"description":134,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Sharepoint Enterprise Server Security Vulnerabilities","Security vulnerabilities affecting Sharepoint Enterprise Server by Microsoft",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":136,"apiVersion":137},"2026-10-17T21:37:27.398Z","3.0",[139,141],{"product":140,"cves":27},"sharepoint_enterprise_server_2016",{"product":142,"cves":143},"sharepoint_enterprise_server_2013",2,{"rows":145,"total":11,"capped":18,"failed":17},[146,150,154,158,162],{"cveId":44,"name":95,"severity":48,"cvss":47,"added":96,"epss":49,"published":147,"ranges":148,"checked":4,"hits":149,"covers":18},"2025-07-08T17:15:58.25",[23],[],{"cveId":58,"name":100,"severity":55,"cvss":61,"added":101,"epss":62,"published":151,"ranges":152,"checked":4,"hits":153,"covers":18},"2023-05-09T18:15:13.317",[23],[],{"cveId":69,"name":105,"severity":55,"cvss":54,"added":106,"epss":72,"published":155,"ranges":156,"checked":4,"hits":157,"covers":18},"2017-10-13T13:29:02.067",[23],[],{"cveId":36,"name":110,"severity":41,"cvss":39,"added":111,"epss":42,"published":159,"ranges":160,"checked":4,"hits":161,"covers":18},"2019-03-05T23:29:00.757",[23],[],{"cveId":51,"name":114,"severity":55,"cvss":54,"added":111,"epss":56,"published":163,"ranges":164,"checked":4,"hits":166,"covers":18},"2020-07-14T23:15:12.057",[165,23],"2013-sp1",[]]