CVE Watch—

CVE-2023-24955

Microsoft SharePoint Server Code Injection Vulnerability

CVSS

—

Sem CVSS

EPSS

85.0%

p100

KEV

SIM

26 de mar. de 2024

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

85.0%EPSS · 30 dias85.0%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

Microsoft / SharePoint Server

Vulnerabilidade

Microsoft SharePoint Server Code Injection Vulnerability

Adicionado ao KEV

26 de mar. de 2024

Corrigir até

16 de abr. de 2024

Uso conhecido em ransomware

Sim

Descrição resumida

Microsoft SharePoint Server contains a code injection vulnerability that allows an authenticated attacker with Site Owner privileges to execute code remotely.

Ação necessária

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notas

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24955; https://nvd.nist.gov/vuln/detail/CVE-2023-24955

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2026-561645.3 MÉD

63.3%

KEV—69Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability114d CVE-2026-456598.8 ALT

99.6%

KEV—80Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability106d CVE-2026-322016.5 MÉD

98.7%

KEV—80Microsoft SharePoint Server Improper Input Validation Vulnerability10d CVE-2023-29357—

100.0%

KEV—80Microsoft SharePoint Server Privilege Escalation Vulnerability—