CVE Watch—

CVE-2023-24955

Microsoft SharePoint Server Code Injection Vulnerability

CVSS

—

Sin CVSS

EPSS

85.0%

p100

KEV

SÍ

26 mar 2024

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

85.0%EPSS · 30 días85.4%

2026-09-162026-10-14

Ficha del catálogo KEV

Producto

Microsoft / SharePoint Server

Vulnerabilidad

Microsoft SharePoint Server Code Injection Vulnerability

Añadido a KEV

26 mar 2024

Remediar antes de

16 abr 2024

Uso conocido en ransomware

Sí

Descripción resumida

Microsoft SharePoint Server contains a code injection vulnerability that allows an authenticated attacker with Site Owner privileges to execute code remotely.

Acción requerida

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notas

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24955; https://nvd.nist.gov/vuln/detail/CVE-2023-24955

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-561645.3 MED

62.4%

KEV—69Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability92d CVE-2026-456598.8 ALT

85.7%

KEV—76Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability84d CVE-2023-29357—

100.0%

KEV—80Microsoft SharePoint Server Privilege Escalation Vulnerability—CVE-2026-32201—

98.7%

KEV—80Microsoft SharePoint Server Improper Input Validation Vulnerability—