CVEDB API

Microsoft SharePoint Remote Code Execution Vulnerability

Exploit prediction scoring system (EPSS) score

EPSS Score 0.844

EPSS Ranking 99.3%

CVSS Severity

CVSS v3 Score 7.2

Proposed Action

Microsoft SharePoint contains a deserialization vulnerability that allows for remote code execution.

Ransomware Campaign

Known

References

Products affected by CVE-2024-38094

Microsoft » Sharepoint Server » Version: N/A

cpe:2.3:a:microsoft:sharepoint_server:-
Microsoft » Sharepoint Server » Version: 2016

cpe:2.3:a:microsoft:sharepoint_server:2016
Microsoft » Sharepoint Server » Version: 2019

cpe:2.3:a:microsoft:sharepoint_server:2019