CVE-2023-36890

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

Microsoft SharePoint Server Information Disclosure Vulnerability

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-284

Affected software

VendorProductVersions
MicrosoftMicrosoft SharePoint Server 2019>= 16.0.0, < 16.0.10401.20025
MicrosoftMicrosoft SharePoint Server Subscription Edition>= 16.0.0, < 16.0.16130.20684

References

Timeline

Published
Aug 8, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-368918.0Microsoft SharePoint Server Spoofing VulnerabilityCVE-2023-368928.0Microsoft SharePoint Server Spoofing VulnerabilityCVE-2023-368936.5Microsoft Outlook Spoofing VulnerabilityCVE-2023-368946.5Microsoft SharePoint Server Information Disclosure VulnerabilityCVE-2023-368957.8Microsoft Outlook Remote Code Execution VulnerabilityCVE-2023-368967.8Microsoft Excel Remote Code Execution VulnerabilityCVE-2023-368976.5Visual Studio Tools for Office Runtime Spoofing VulnerabilityCVE-2023-368987.8Tablet Windows User Interface Application Core Remote Code Execution VulnerabilityCVE-2023-368998.8ASP.NET Elevation of Privilege VulnerabilityCVE-2023-36909.8A vulnerability, which was classified as critical, has been found in Bylancer QuickOrder 6.3.7. Affected by this issue is some unknown functCVE-2023-369007.8Windows Common Log File System Driver Elevation of Privilege VulnerabilityCVE-2023-369027.0Windows Runtime Remote Code Execution Vulnerability
CVE-2023-36890: Medium severity, CVSS 6.5 | Vulnix