CVE-2023-29357

CISA Known Exploited Vulnerability (KEV)

Name

Microsoft SharePoint Server Privilege Escalation Vulnerability

Exploit added

January 10, 2024

Action due

January 31, 2024

Action required

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Microsoft SharePoint Server Elevation of Privilege Vulnerability

CWE-ID	CWE Name
CWE-303	Incorrect Implementation of Authentication Algorithm

cpe:2.3:a:microsoft:sharepoint_server:2019:::::::*

Source:
NVD

Published:
June 14, 2023

Updated:
June 10, 2024

Base score:
9.8

Severity:

CRITICAL

Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Not defined