Multiple vulnerabilities in Microsoft SharePoint Server
| Risk | Medium |
| Patch available | YES |
| Number of vulnerabilities | 5 |
| CVE-ID | CVE-2024-43466 CVE-2024-38227 CVE-2024-38018 CVE-2024-43464 CVE-2024-38228 |
| CWE-ID | CWE-502 CWE-77 |
| Exploitation vector | Network |
| Public exploit | N/A |
| Vulnerable software |
Microsoft SharePoint Server Server applications / Application servers Microsoft SharePoint Server Subscription Edition Server applications / Application servers Microsoft SharePoint Enterprise Server Server applications / Application servers |
| Vendor | Microsoft |
Security Bulletin
This security bulletin contains information about 5 vulnerabilities.
1) Deserialization of Untrusted Data
EUVDB-ID: #VU97026
Risk: Medium
CVSSv3.1: 5.7 [CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2024-43466
CWE-ID:
CWE-502 - Deserialization of Untrusted Data
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to insecure input validation when processing serialized data within the SPAutoSerializingObject class in Microsoft SharePoint Server. A remote user can pass specially crafted data to the application and cause a denial of service condition on the target system.
MitigationInstall updates from vendor's website.
Vulnerable software versionsMicrosoft SharePoint Server: 2019
Microsoft SharePoint Server Subscription Edition: All versions
Microsoft SharePoint Enterprise Server: 2016
CPE2.3- cpe:2.3:a:microsoft:microsoft_sharepoint_server:2019:*:*:*:*:*:*:
- cpe:2.3:a:microsoft:microsoft_sharepoint_server_subscription_edition:*:*:*:*:*:*:*:
- cpe:2.3:a:microsoft:microsoft_sharepoint_enterprise_server:2016:*:*:*:*:*:*:
http://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2024-43466
http://www.zerodayinitiative.com/advisories/ZDI-24-1206/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
2) Command Injection
EUVDB-ID: #VU97030
Risk: Low
CVSSv3.1: 6.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2024-38227
CWE-ID:
CWE-77 - Command injection
Exploit availability: No
DescriptionThe vulnerability allows a remote user to execute arbitrary commands on the target system.
The vulnerability exists due to improper input validation in Microsoft SharePoint Server. A remote administrator can execute arbitrary commands on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
MitigationInstall updates from vendor's website.
Vulnerable software versionsMicrosoft SharePoint Server: 2019
Microsoft SharePoint Server Subscription Edition: All versions
Microsoft SharePoint Enterprise Server: 2016
CPE2.3- cpe:2.3:a:microsoft:microsoft_sharepoint_server:2019:*:*:*:*:*:*:
- cpe:2.3:a:microsoft:microsoft_sharepoint_server_subscription_edition:*:*:*:*:*:*:*:
- cpe:2.3:a:microsoft:microsoft_sharepoint_enterprise_server:2016:*:*:*:*:*:*:
http://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2024-38227
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
3) Deserialization of Untrusted Data
EUVDB-ID: #VU97029
Risk: Medium
CVSSv3.1: 7.7 [CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2024-38018
CWE-ID:
CWE-502 - Deserialization of Untrusted Data
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to insecure input validation when processing serialized serialized instances of the SPThemes class in Microsoft SharePoint Server. A remote user can pass specially crafted data to the application and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
MitigationInstall updates from vendor's website.
Vulnerable software versionsMicrosoft SharePoint Server: 2019
Microsoft SharePoint Server Subscription Edition: All versions
Microsoft SharePoint Enterprise Server: 2016
CPE2.3- cpe:2.3:a:microsoft:microsoft_sharepoint_server:2019:*:*:*:*:*:*:
- cpe:2.3:a:microsoft:microsoft_sharepoint_server_subscription_edition:*:*:*:*:*:*:*:
- cpe:2.3:a:microsoft:microsoft_sharepoint_enterprise_server:2016:*:*:*:*:*:*:
http://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2024-38018
http://www.zerodayinitiative.com/advisories/ZDI-24-1204/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
4) Deserialization of Untrusted Data
EUVDB-ID: #VU97028
Risk: Low
CVSSv3.1: 6.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2024-43464
CWE-ID:
CWE-502 - Deserialization of Untrusted Data
Exploit availability: No
DescriptionThe vulnerability allows a remote user to execute arbitrary code on the target system.
The vulnerability exists due to insecure input validation when processing serialized data in Microsoft SharePoint Server. A remote administrator can pass specially crafted data to the application and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
MitigationInstall updates from vendor's website.
Vulnerable software versionsMicrosoft SharePoint Server: 2019
Microsoft SharePoint Server Subscription Edition: All versions
Microsoft SharePoint Enterprise Server: 2016
CPE2.3- cpe:2.3:a:microsoft:microsoft_sharepoint_server:2019:*:*:*:*:*:*:
- cpe:2.3:a:microsoft:microsoft_sharepoint_server_subscription_edition:*:*:*:*:*:*:*:
- cpe:2.3:a:microsoft:microsoft_sharepoint_enterprise_server:2016:*:*:*:*:*:*:
http://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2024-43464
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
5) Command Injection
EUVDB-ID: #VU97027
Risk: Low
CVSSv3.1: 6.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2024-38228
CWE-ID:
CWE-77 - Command injection
Exploit availability: No
DescriptionThe vulnerability allows a remote user to execute arbitrary commands on the target system.
The vulnerability exists due to improper input validation in Microsoft SharePoint Server. A remote administrator can upload a specially crafted file and execute arbitrary commands on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
MitigationInstall updates from vendor's website.
Vulnerable software versionsMicrosoft SharePoint Server: 2019
Microsoft SharePoint Server Subscription Edition: All versions
Microsoft SharePoint Enterprise Server: 2016
CPE2.3- cpe:2.3:a:microsoft:microsoft_sharepoint_server:2019:*:*:*:*:*:*:
- cpe:2.3:a:microsoft:microsoft_sharepoint_server_subscription_edition:*:*:*:*:*:*:*:
- cpe:2.3:a:microsoft:microsoft_sharepoint_enterprise_server:2016:*:*:*:*:*:*:
http://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2024-38228
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
