CVE-2025-49704 Microsoft SharePoint Remote Code Execution Vulnerability

...

EUVD-2025-20554

Improper control of generation of code 'code injection' in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

CVE-2025-49701

CVE-2025-49701 is a Microsoft SharePoint remote code execution vulnerability caused by improper authorization, enabling an authenticated attacker to execute code over the network. Public advisories confirm impact as remote code execution in SharePoint environments, with patched updates released i...

CVE-2025-49701 Microsoft SharePoint Remote Code Execution Vulnerability

...

CVE-2025-49701 Microsoft SharePoint Remote Code Execution Vulnerability

...

Description of the security update for SharePoint Server 2019: July 8, 2025 (KB5002741)

None None...

Description of the security update for SharePoint Enterprise Server 2016: July 8, 2025 (KB5002744)

None None...

Description of the security update for SharePoint Server 2019 Language Pack: July 8, 2025 (KB5002739)

None None...

Description of the security update for SharePoint Server Subscription Edition: July 8, 2025 (KB5002751)

None None...

Description of the security update for SharePoint Enterprise Server 2016 Language Pack: July 8, 2025 (KB5002743)

None None...

Microsoft SharePoint Server Spoofing Vulnerability

Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network...

Microsoft SharePoint Remote Code Execution Vulnerability

Improper control of generation of code 'code injection' in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

Microsoft SharePoint Remote Code Execution Vulnerability

Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

Microsoft SharePoint 授权问题漏洞

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A remote code executi...

PT-2025-28601

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint versions prior to the July 2025 patchday. Description An issue exists in Microsoft SharePoint related to improper control of code generation, potentially allowing remote code execution. This vulnerability has been actively...

Security Updates for Microsoft SharePoint Server Subscription Edition (July 2025)

The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Server Spoofing Vulnerability. CVE-2025-49706 - Remote Code Execution Vulnerability. CVE-2025-49701 %NASLMINLEVEL 70300 C...

Security Updates for Microsoft SharePoint Server 2016 (July 2025)

The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Server Spoofing Vulnerability. CVE-2025-49706 - Remote Code Execution Vulnerabilites. CVE-2025-49701, CVE-2025-49703, CVE-2025-49704...

Microsoft SharePoint Server ToolPane Unauthenticated Remote Code Execution (aka ToolShell)

This module exploits the authentication bypass vulnerabilities CVE-2025-49706 and CVE-2025-53771, and an unsafe deserialization vulnerability CVE-2025-49704, to achieve unauthenticated RCE against a vulnerable Microsoft SharePoint Server. The vulnerability CVE-2025-53770 was disclosed as being a...

(Pwn2Own) Microsoft SharePoint ToolPane Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected installations of Microsoft SharePoint. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the Referer HTTP header provided to the ToolPane endpoint. The...

Microsoft SharePoint 代码注入漏洞

SharePoint Server is a locally deployed enterprise collaboration platform from Microsoft that supports content sharing, knowledge management, and application integration, and works seamlessly with Microsoft 365 subscriptions to access the latest features. A remote code execution vulnerability...