First published: Tue May 14 2024(Updated: )
Microsoft SharePoint Server Remote Code Execution Vulnerability
Credit: secure@microsoft.com
Affected Software | Affected Version | How to fix |
---|---|---|
Microsoft SharePoint Server Subscription Edition | ||
Microsoft SharePoint Server 2019 | ||
Microsoft SharePoint Server 2010 | <16.0.17328.20292 | |
Microsoft SharePoint Server 2010 | =2016 | |
Microsoft SharePoint Server 2010 | =2019 | |
Microsoft SharePoint Enterprise Server |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2024-30044 is rated as a critical vulnerability due to its potential for remote code execution.
To fix CVE-2024-30044, apply the latest security patches released by Microsoft for the affected SharePoint versions.
CVE-2024-30044 affects Microsoft SharePoint Enterprise Server 2016, SharePoint Server 2019, and SharePoint Server Subscription Edition.
Exploiting CVE-2024-30044 can allow an attacker to execute arbitrary code with the privileges of the affected application.
Currently, the recommended action for CVE-2024-30044 is to install the security updates as no specific workarounds are provided.