Skip to main content

Microsoft SharePoint Server Remote Code Execution Vulnerability

This vulnerability is a remote-control execution vulnerability affecting Microsoft SharePoint Server. The vulnerability was assigned a CVSSv3 score of 7.2 and could allow an authenticated site owner to execute code on an affected SharePoint Server. This RCE was patched as part of the May 2023 Patch Tuesday release. The Uganda National CERT and Coordination Center (CERT.UG/CC) strongly advises all System and Network admins to review and implement the appropriate fix. The details of the updates can be found here.