Main Vulnerability Database Vulnerabilities #VU112648

Code Injection in Microsoft SharePoint Server and Microsoft SharePoint Enterprise Server - CVE-2025-49704

Published: July 9, 2025 / Updated: July 22, 2025

Vulnerability identifier: #VU112648

CSH Severity: Medium

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2025-49704

CWE-ID: CWE-94

Exploitation vector: Remote access

Exploit availability: The vulnerability is being exploited in the wild

Vulnerability details

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to improper input validation in Microsoft SharePoint. A remote user can send a specially crafted request and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Affected software

Microsoft SharePoint Server
Microsoft SharePoint Enterprise Server

How to mitigate CVE-2025-49704

Install updates from vendor's website.

Microsoft SharePoint Server - update to 16.0.10417.20027 16.0.10417.20027
Microsoft SharePoint Enterprise Server - update to 16.0.5508.1000

External References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49704

Related Security Bulletins