CVE-2024-49064

EPSS 2.6%
Veröffentlicht 12.12.2024 02:04:30
Zuletzt bearbeitet 08.01.2025 12:41:02
Erkennungen
Login

Microsoft SharePoint Information Disclosure Vulnerability

Microsoft SharePoint Information Disclosure Vulnerability

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

NVD 3 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ Sharepoint Server Version - SwEdition subscription

Microsoft ≫ Sharepoint Server Version 2016 SwEdition enterprise

Microsoft ≫ Sharepoint Server Version 2019

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	2.6%	0.837

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
Microsoft	6.5	2.8	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CWE-611 Improper Restriction of XML External Entity Reference

The product processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the product to embed incorrect documents into its output.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49064

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2024-49064

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-49064

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-49064

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2024-49064