Title

Microsoft SharePoint Remote Code Execution Vulnerabilities (Cat II impact)

Discussion

Microsoft has released a security bulletin addressing multiple vulnerabilities in Microsoft SharePoint. To exploit these vulnerabilities, an attacker would utilize various Tactics, Techniques and Procedures (TTPs). If successfully exploited, these vulnerabilities would allow an attacker to perform cross site scripting attacks, disclose sensitive information and compromise the affected system.

Check Content

Fix Text

Additional Identifiers

Rule ID:

Vulnerability ID: V-40765

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.