CVE-2023-24954 Microsoft SharePoint Server Information Disclosure Vulnerability

🗓️ 09 May 2023 17:03:01Reported by microsoftType

Microsoft SharePoint Information Disclosure CVE-2023-24954

Reporter	Title	Published	Views	Family All 24
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server packages allows a perpetrator to disclose protected information.	15 May 202300:00	–	bdu_fstec
Circl	CVE-2023-24954	9 May 202322:44	–	circl
CNNVD	Microsoft SharePoint 安全漏洞	9 May 202300:00	–	cnnvd
CNVD	Microsoft SharePoint Information Disclosure Vulnerability (CNVD-2023-53465)	12 May 202300:00	–	cnvd
CVE	CVE-2023-24954	9 May 202317:03	–	cve
EUVD	EUVD-2023-28941	3 Oct 202520:07	–	euvd
Microsoft KB	Description of the security update for SharePoint Server 2019: May 9, 2023 (KB5002389)	9 May 202307:00	–	mskb
Microsoft KB	Description of the security update for SharePoint Server Subscription Edition: May 9, 2023 (KB5002390)	9 May 202307:00	–	mskb
Microsoft KB	Description of the security update for SharePoint Enterprise Server 2016: May 9, 2023 (KB5002397)	9 May 202307:00	–	mskb
Kaspersky	KLA49155 Multiple vulnerabilities in Microsoft Office	9 May 202300:00	–	kaspersky

[
  {
    "vendor": "Microsoft",
    "product": "Microsoft SharePoint Enterprise Server 2016",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "16.0.0",
        "lessThan": "16.0.5395.1000",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft SharePoint Server 2019",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "16.0.0",
        "lessThan": "16.0.10398.20000",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft SharePoint Server Subscription Edition",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "16.0.0",
        "lessThan": "16.0.16130.20420",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  }
]

Source	Link
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24954

10 Jul 2025 16:38Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.16.5

EPSS0.01786

CWE-918