Microsoft / Microsoft SharePoint Enterprise Server 2016 · Microsoft / Microsoft SharePoint Server 2019 · Microsoft / Microsoft SharePoint Server Subscription Edition
8.8 · CVSS 3.1HighCISA KEV
CISA lists this CVE as exploited in the wild. Patch it before anything rated by score alone.
Description
Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.