CVE-2023-24955 Microsoft SharePoint Server
Microsoft SharePoint Server contains a code injection vulnerability that allows an authenticated attacker with Site Owner privileges to execute code remotely.
- CVSS
- not scored
On CISA’s exploited list
Microsoft SharePoint Server Code Injection Vulnerability
- Added
- 2024-03-26
- Federal patch deadline
- 2024-04-16
- Ransomware use
- known