sharepoint_enterprise_server_2016 vulnerabilities
CVEs whose affected-version data names the sharepoint_enterprise_server_2016 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
92 CVEsRSS
CVE-2026-20945Medium· 4.6Microsoft SharePoint Server Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
▾ SunlitMicrosoft · Microsoft SharePoint Enterprise Server 2016EPSS 19%via CVEORG
CVE-2026-32201Medium· 6.5CISA KEV0dayPoCMicrosoft SharePoint Server Spoofing Vulnerability
Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
▾ MidnightMicrosoft · Microsoft SharePoint Enterprise Server 2016EPSS 0.98%via CVEORG