CVE-2025-49704

Microsoft SharePoint Code Injection Vulnerability

Sharepoint Server

Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

8. Jul 2025

Ausgewertete Quellen

• Microsoft
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49704
• Microsoft
  https://www.microsoft.com/en-us/security/blog/2025/07/22/disrupting-active-exploitation-of-on-premises-sharepoint-vulnerabilities/
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-49704
• CISA
  Microsoft SharePoint Code Injection Vulnerability
• NVD
  CVE-2025-49704