CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2025-07-08
Microsoft SharePoint Server Remote Code Execution (RCE) Vulnerability Advisory (CVE-2025-49704)
[Affected Scope] On-premises Microsoft SharePoint Server 2016, 2019, and Subscription Edition
[Impact] An authorized attacker can inject and execute arbitrary code over the network, leading to complete system compromise
[Mitigation] Immediately apply the official Microsoft security patches and restrict network access to SharePoint management endpoints