CVE-2025-49704 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
High KEV CVSS: 8.8

CVE-2025-49704

Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
Vendor
Microsoft
Product
Sharepoint Server
CWE
CWE-94
Yayın Tarihi
2025-07-08 17:15:57
Güncelleme
2025-10-27 17:12:33
Source Identifier
secure@microsoft.com
KEV Date Added
2025-07-22

Kategoriler

CWE-94 Sharepoint Server HIGH Microsoft 2025

Referanslar

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49704 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-49704 https://www.microsoft.com/en-us/security/blog/2025/07/22/disrupting-active-exploitation-of-on-premises-sharepoint-vulnerabilities/