CVE-2023-21744: Microsoft SharePoint Server Remote Code Execution Vulnerability
Published Jan 10, 2023
·Updated
Microsoft SharePoint Server Remote Code Execution Vulnerability
Affected Software
10 affected componentsFixes available
Microsoft SharePoint Server Subscription Edition
Microsoft SharePoint Foundation 2013
Microsoft SharePoint Server 2019
Microsoft SharePoint Enterprise Server 2013
Microsoft SharePoint Foundation=2013-sp1
Microsoft SharePoint Server
Microsoft SharePoint Server=2013-sp1
Microsoft SharePoint Server=2016
Microsoft SharePoint Server=2019
Microsoft SharePoint Enterprise Server 2016
Event History
Jan 10, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverity
Data Sourced
via Microsoft·08:00 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·10:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2023-21744?
CVE-2023-21744 is a remote code execution vulnerability in Microsoft SharePoint Server.
2
How severe is CVE-2023-21744?
CVE-2023-21744 has a severity score of 8.8 out of 10, which is considered high.
3
Which software is affected by CVE-2023-21744?
Microsoft SharePoint Foundation 2013, Microsoft SharePoint Server, Microsoft SharePoint Server 2013, Microsoft SharePoint Server 2016, and Microsoft SharePoint Server 2019 are affected by CVE-2023-21744.
4
How can I fix CVE-2023-21744?
You can apply the relevant patches provided by Microsoft to fix CVE-2023-21744. Please refer to the vendor's website for the specific patches for your SharePoint Server version.
5
Where can I find more information about CVE-2023-21744?
You can find more information about CVE-2023-21744 on the Microsoft Security Response Center website.