high7.2Known exploited
CVE-2024-38094
Microsoft SharePoint Deserialization Vulnerability
Exploited in the wild
This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2024-10-22. Federal due date: 2024-11-12.
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Impact
Microsoft SharePoint Remote Code Execution Vulnerability
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Sharepoint Server | All versions Versions 2016, 2019 |