Browse / CVEs / CVE-2025-49704
CVE-2025-49704· microsoft / sharepoint· CWE-94
Microsoft SharePoint Code Injection Vulnerability
Exploited in the wild. Listed by CISA on 2025-07-22; known to be used by ransomware.
100%likelihood of exploitation, next 30 days
100%of all CVEs are less likely
Nonecheck to confirm it
Microsoft SharePoint contains a code injection vulnerability that could allow an authorized attacker to execute code over a network. This vulnerability could be chained with CVE-2025-49706. CVE-2025-53770 is a patch bypass for CVE-2025-49704, and the updates for CVE-2025-53770 include more robust protection than those for CVE-2025-49704.
No ready check is stored for this CVE. Confirm it by hand from the references.
References
Use this check only on systems you are authorised to test. Where the data comes from