Description
Microsoft SharePoint Server contains a code injection vulnerability that allows an authenticated attacker with Site Owner privileges to execute code remotely.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| Microsoft SharePoint Enterprise Server 2016 | Microsoft / Microsoft SharePoint Enterprise Server 2016 | >= 16.0.0, < 16.0.5395.1000 | affected |
| Microsoft SharePoint Server 2019 | Microsoft / Microsoft SharePoint Server 2019 | >= 16.0.0, < 16.0.10398.20000 | affected |
| Microsoft SharePoint Server Subscription Edition | Microsoft / Microsoft SharePoint Server Subscription Edition | >= 16.0.0, < 16.0.16130.20420 | affected |