Title

Multiple Vulnerabilities in Microsoft Office SharePoint Server (Cat II impact)

Discussion

Microsoft has released a security bulletin addressing multiple vulnerabilities in Microsoft SharePoint. To exploit these vulnerabilities, an attacker would send specially crafted page content to a SharePoint server. If successfully exploited, these vulnerabilities would allow an attacker to run arbitrary code in the security context of the W3WP service account on the target SharePoint site and compromise the affected system.

Check Content

Fix Text

Additional Identifiers

Rule ID:

Vulnerability ID: V-50449

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.