QID 110461

Date Published: 2024-03-13

QID 110461: Microsoft SharePoint Server Remote Code Execution (RCE) Vulnerability for March 2024

Microsoft has released March 2024 security update to fix a remote code execution vulnerability in its Sharepoint Server Versions 2016, 2019, and Sharepoint Subscription Edition.

This security update contains the following KBs:

KB5002564
KB5002562
KB5002559

QID Detection Logic (Authenticated):
Operating System: Windows

Successful exploitation allows an attacker to perform Remote Code Execution.

CVSS V3 rated as High - 7.8 severity.

CVSS V2 rated as High - 7.2 severity.

Solution

Refer to Microsoft Security Guidance for more details pertaining to this vulnerability.

KB5002564
KB5002562
KB5002559

Vendor References

KB5002559 - support.microsoft.com/KB/5002559
KB5002562 - support.microsoft.com/KB/5002562
KB5002564 - support.microsoft.com/KB/5002564

CVEs related to QID 110461

CVE-2024-21426 |

Software Advisories

Advisory ID	Software	Component	Link
Microsoft Sharepoint March 2024			msrc.microsoft.com/update-guide/

By selecting these links, you may be leaving CVEreport webspace. We have provided these links to other websites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other websites that are more appropriate for your purpose. CVEreport does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, CVEreport does not endorse any commercial products that may be mentioned on these sites. Please address comments about any linked pages to [email protected].