Vulnerabilities > CVE-2024-38024 - Deserialization of Untrusted Data vulnerability in Microsoft Sharepoint Server 2016/2019

CVSS 7.2 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

HIGH

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

NVD

Published: 2024-07-09

Updated: 2024-07-11

Summary

Microsoft SharePoint Server Remote Code Execution Vulnerability

Vulnerable Configurations

Part	Description	Count
Application	Microsoft Microsoft Sharepoint Server 2016 Microsoft Sharepoint Server 2019 Microsoft Sharepoint Server -	3

Common Weakness Enumeration (CWE)

CWE-502 - Deserialization of Untrusted Data

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38024

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.