Microsoft SharePoint SQL Injection Vulnerability Leading to Remote Code Execution

A SQL injection vulnerability has been identified in Microsoft Office SharePoint, allowing an authorized attacker to execute code remotely over the network. This issue arises from improper neutralization of special elements used in SQL commands.

Impact

Exploitation of this vulnerability could allow an authenticated attacker to execute code remotely on the affected SharePoint server.

Remediation

Users can download the security update for Microsoft SharePoint Server Subscription Edition, SharePoint Server 2019, or SharePoint Enterprise Server 2016 from the Microsoft Update Catalog. Instructions for applying the update are available on the Microsoft Support website.