Fixes 26 records
Priority CRITICAL 97KEV
Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.09852 · Published 2026-08-11 · Fixed in 16.0.5565.1001, 16.0.10417.20198 +1 CWE-94
Priority MEDIUM 44
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.02044 · Published 2026-08-11 · Fixed in 16.0.5565.1001, 16.0.10417.20198 +1 CWE-502
Priority MEDIUM 44
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.02044 · Published 2026-08-11 · Fixed in 16.0.20326.20190 CWE-502
Priority MEDIUM 44
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.02044 · Published 2026-08-11 · Fixed in 16.0.5565.1001, 16.0.10417.20198 +1 CWE-502
Priority MEDIUM 44
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.02044 · Published 2026-08-11 · Fixed in 16.0.5565.1001, 16.0.10417.20198 +1 CWE-502
Priority MEDIUM 44
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.02044 · Published 2026-08-11 · Fixed in 16.0.5565.1001, 16.0.10417.20198 +1 CWE-502
Priority MEDIUM 44
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.02044 · Published 2026-08-11 · Fixed in 16.0.5565.1001, 16.0.10417.20198 +1 CWE-502
Priority MEDIUM 43
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01694 · Published 2026-08-11 · Fixed in 16.0.10417.20198, 16.0.19725.20522 CWE-502
Priority MEDIUM 42
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.0094 · Published 2026-08-11 · Fixed in 16.0.5565.1001, 16.0.10417.20198 +1 CWE-918
Priority MEDIUM 42
Missing authentication for critical function in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.0094 · Published 2026-08-11 · Fixed in 16.0.5565.1001, 16.0.10417.20198 +1 CWE-306
Priority MEDIUM 42
Improper authentication in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.0094 · Published 2026-08-11 · Fixed in 16.0.5565.1001, 16.0.10417.20198 +1 CWE-287
Priority MEDIUM 41
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.7· Network · Low privileges · User interaction · EPSS 0.00784 · Published 2026-08-11 · Fixed in 16.0.10417.20198, 16.0.19725.20522 CWE-79
Priority LOW 39
Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00956 · Published 2026-08-11 · Fixed in 16.0.5565.1001, 16.0.10417.20198 +1 CWE-20
Priority LOW 38
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.0062 · Published 2026-08-11 · Fixed in 16.0.10417.20198, 16.0.19725.20522 CWE-79
Priority LOW 35
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVSS 3.1HIGH 7.3· Network · Low privileges · User interaction · EPSS 0.00649 · Published 2026-08-11 · Fixed in 16.0.5565.1001, 16.0.10417.20198 +1 CWE-79
Priority LOW 33
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01874 · Published 2026-08-11 · Fixed in 16.0.5565.1001, 16.0.10417.20198 +1 CWE-502
Priority LOW 31
Insufficiently protected credentials in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00911 · Published 2026-08-11 · Fixed in 16.0.5565.1001, 16.0.10417.20198 +1 CWE-522
Priority LOW 31
Relative path traversal in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.0123 · Published 2026-08-11 · Fixed in 16.0.5565.1001, 16.0.10417.20198 +1 CWE-23
Priority LOW 31
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00911 · Published 2026-08-11 · Fixed in 16.0.5565.1001, 16.0.10417.20198 +1 CWE-918
Priority LOW 30
Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to perform tampering over a network.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00725 · Published 2026-08-11 · Fixed in 16.0.5565.1001, 16.0.10417.20198 +1 CWE-863
Priority LOW 25
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00583 · Published 2026-08-11 · Fixed in 16.0.5565.1001, 16.0.10417.20198 +1 CWE-79
Priority LOW 25
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00583 · Published 2026-08-11 · Fixed in 16.0.5565.1001, 16.0.10417.20198 +1 CWE-79
Priority LOW 25
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00583 · Published 2026-08-11 · Fixed in 16.0.5565.1001, 16.0.10417.20198 +1 CWE-79
Priority LOW 25
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00583 · Published 2026-08-11 · Fixed in 16.0.5565.1001, 16.0.10417.20198 +1 CWE-79
Priority LOW 25
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00474 · Published 2026-08-11 · Fixed in 16.0.10417.20198, 16.0.19725.20522 CWE-79
Priority LOW 22
Improper input validation in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVSS 3.1MEDIUM 4.6· Network · Low privileges · User interaction · EPSS 0.00583 · Published 2026-08-11 · Fixed in 16.0.5565.1001, 16.0.10417.20198 +1 CWE-20
THREATIST.IORead the docs