CVE Watch—

CVE-2023-24955

Microsoft SharePoint Server Code Injection Vulnerability

CVSS

—

Sin CVSS

EPSS

85.4%

p100

KEV

SÍ

26 mar 2024

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

85.4%EPSS · 30 días85.4%

2026-06-302026-07-16

Ficha del catálogo KEV

Producto

Microsoft / SharePoint Server

Vulnerabilidad

Microsoft SharePoint Server Code Injection Vulnerability

Añadido a KEV

26 mar 2024

Remediar antes de

16 abr 2024

Uso conocido en ransomware

Sí

Descripción resumida

Microsoft SharePoint Server contains a code injection vulnerability that allows an authenticated attacker with Site Owner privileges to execute code remotely.

Acción requerida

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notas

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24955; https://nvd.nist.gov/vuln/detail/CVE-2023-24955

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2023-29357—

99.9%

KEV—80Microsoft SharePoint Server Privilege Escalation Vulnerability—CVE-2026-32201—

97.5%

KEV—79Microsoft SharePoint Server Improper Input Validation Vulnerability—CVE-2026-561645.3 MED

92.0%

KEV—78Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability2d CVE-2026-456598.8 ALT

86.8%

KEV—76Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability14d