CVE Vulnerability Advisory Database

[Affected Scope] Microsoft SharePoint Server 2016, 2019, and Subscription Edition.

[Impact] Authorized attackers can execute arbitrary code over the network, leading to full server compromise.

[Mitigation] Apply official Microsoft security updates immediately and monitor for unauthorized web shell activity.

[Affected Scope] Microsoft SharePoint Server on-premises deployments

[Impact] Unauthenticated remote attackers can bypass security features over the network to access sensitive data or escalate privileges

[Mitigation] Apply the official Microsoft security updates immediately and restrict external network exposure until patched

[Affected Scope] Microsoft SharePoint Server deployments

[Impact] Unauthorized remote attackers can execute arbitrary code over the network and fully compromise the system

[Mitigation] Apply the official Microsoft security updates immediately and restrict external network exposure

[Affected Scope] Microsoft Office SharePoint Server environments

[Impact] Unauthenticated remote attackers can bypass authentication mechanisms over the network to elevate privileges to administrative levels

[Mitigation] Immediately apply the official Microsoft security patches and restrict external network access to SharePoint management endpoints

[Affected Scope] Microsoft SharePoint Server deployments

[Impact] Unauthenticated remote attackers can execute arbitrary code over the network and fully compromise the host server

[Mitigation] Apply the official Microsoft security updates immediately, and restrict network access to SharePoint endpoints until patched

[Affected Scope] Microsoft SharePoint Server deployments

[Impact] An authorized attacker can exploit a deserialization of untrusted data vulnerability over the network to execute arbitrary code with server privileges.

[Mitigation] Immediately apply the official security patches provided by Microsoft and restrict network access to SharePoint servers.

[Affected Scope] Microsoft SharePoint Server deployments

[Impact] An unauthenticated remote attacker can exploit improper input validation (CWE-20) over the network to perform spoofing, potentially leading to unauthorized data exposure and modification

[Mitigation] Immediately apply the official security updates provided by Microsoft, and implement WAF rules to monitor and block anomalous HTTP requests in the interim

[Affected Scope] Microsoft SharePoint Server deployments

[Impact] Unauthenticated remote attackers can execute arbitrary code over the network and gain full control of the target server.

[Mitigation] Apply the official Microsoft security patches immediately and restrict external access to SharePoint web interfaces until patched.

[Affected Scope] On-premises deployments of Microsoft SharePoint Server

[Impact] Unauthenticated remote attackers can bypass authentication mechanisms to perform network-based spoofing, potentially accessing sensitive internal data

[Mitigation] Immediately apply the official Microsoft security updates and restrict external network access to SharePoint web ports

[Affected Scope] On-premises Microsoft SharePoint Server 2016, 2019, and Subscription Edition

[Impact] An authorized attacker can inject and execute arbitrary code over the network, leading to complete system compromise

[Mitigation] Immediately apply the official Microsoft security patches and restrict network access to SharePoint management endpoints

[Affected Scope] Microsoft SharePoint Server 2016, 2019, and Subscription Edition

[Impact] An authorized attacker with Site Owner permissions can execute arbitrary code within the server context via specially crafted API requests, leading to full system compromise

[Mitigation] Apply the official Microsoft Cumulative Update (CU) patches immediately, restrict administrative privileges, and audit system logs for indicators of compromise

[Affected Scope] Microsoft SharePoint Server 2019 and SharePoint Server Subscription Edition.

[Impact] An unauthenticated attacker can send a specially crafted JWT token to bypass authentication, gain administrator privileges, and potentially chain it with RCE vulnerabilities.

[Mitigation] Apply the official Microsoft Cumulative Update (CU) immediately and restrict unauthorized access at the network and IIS levels prior to patching.

[Affected Scope] Microsoft SharePoint Server 2016, 2019, and Subscription Edition

[Impact] An authenticated attacker with high privileges (Site Owner/Administrator) can execute arbitrary code in the context of the server, leading to complete system compromise

[Mitigation] Apply the official Microsoft security patches immediately and restrict access to the SharePoint administration interface from untrusted networks