Microsoft Sharepoint Enterprise Server 2013 — known CVE vulnerabilities

Every CVE whose affected-product data names Microsoft Sharepoint Enterprise Server 2013, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2018-8378 — CVSS 5.5 (medium): An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable…
• CVE-2018-8426 — CVSS 5.4 (medium): A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web…