CVE-2024-30043

🗓️ 14 May 2024 16:57:29Reported by microsoftType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 142 Views

Microsoft SharePoint Server Info Disclosure Vulnerability CVE-2024-30043

Reporter	Title	Published	Views	Family All 22
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server programs lies in the improper limitation of XML references to external objects, which allows attackers to gain unauthorized access to protected information.	20 May 202400:00	–	bdu_fstec
Circl	CVE-2024-30043	31 May 202408:21	–	circl
CNNVD	Microsoft SharePoint 代码问题漏洞	14 May 202400:00	–	cnnvd
CNVD	Microsoft SharePoint Server Information Disclosure Vulnerability (CNVD-2024-39675)	16 May 202400:00	–	cnvd
Cvelist	CVE-2024-30043 Microsoft SharePoint Server Information Disclosure Vulnerability	14 May 202416:57	–	cvelist
GithubExploit	Exploit for Improper Restriction of XML External Entity Reference in Microsoft	6 Jun 202418:31	–	githubexploit
Microsoft KB	Description of the security update for SharePoint Server 2019: May 14, 2024 (KB5002596)	14 May 202407:00	–	mskb
Microsoft KB	Description of the security update for SharePoint Enterprise Server 2016: May 14, 2024 (KB5002598)	14 May 202407:00	–	mskb
Microsoft KB	Description of the security update for SharePoint Server Subscription Edition: May 14, 2024 (KB5002599)	14 May 202407:00	–	mskb
Kaspersky	KLA67391 Multiple vulnerabilities in Microsoft Office	14 May 202400:00	–	kaspersky

NVD

Vulners

CNA

Node

microsoft sharepoint_serverRange<16.0.17328.20292subscription

microsoft sharepoint_serverMatch2016enterprise

microsoft sharepoint_serverMatch2019

[
  {
    "vendor": "Microsoft",
    "product": "Microsoft SharePoint Enterprise Server 2016",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "16.0.0",
        "lessThan": "16.0.5448.1000",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft SharePoint Server 2019",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "16.0.0",
        "lessThan": "16.0.10409.20047",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft SharePoint Server Subscription Edition",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "16.0.0",
        "lessThan": "16.0.17328.20292",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  }
]

Source	Link
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30043

17 Jun 2026 07:26Current

6Medium risk

Vulners AI Score6

CVSS 3.16.5 - 7.5

EPSS0.54659

SSVC

CWE-611