<< Back
CVE Number Vulnerability Product Severity Date
CVE-2024-38018 Microsoft SharePoint Server Remote Code Execution Vulnerability Microsoft SharePoint Server Critical 19-09-2024

Technical Information

An authenticated attacker, having minimum site member permission could execute arbitrary code remotely on the SharePoint Server through network-based attack.

Patch release date: Sep 09, 2024
Further information on this vulnerability is available at : CVE-2024-38018

Affected Software

Microsoft SharePoint Enterprise Server 2016,
Microsoft SharePoint Server 2019,
Microsoft SharePoint Server Subscription Edition