CVE-2025-49704

HighKnown ExploitedRansomware

Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over…

[email protected]·CWE-94·Published 2025-07-08

CVSS

8.8

EPSS

1.00

KEV

Yes

Exploits

Vendor statements (2)

cve.orgen

150 chars

Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

NVDes

174 chars

El control inadecuado de la generación de código ('inyección de código') en Microsoft Office SharePoint permite que un atacante autorizado ejecute código a través de una red.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	8.8	—	—	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
3.1	Secondary	NVD	8.8	2.8	5.9	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H