Sec Feed Reader

CVE-2025-49704

Kenndaten

CVE.org (extern): Record bei CVE.org oeffnen
CVSS (CVE.org): 8.8
EPSS (FIRST): Score 0.99995000000, Perzentil 0.99989000000
EPSS-Stand: 2026-10-21 14:26 UTC
Veroeffentlicht (CVE.org): 2025-07-08
Zuletzt angereichert: 2026-10-20 22:46 UTC
Externe Referenzen (Anzahl): 24
Anreicherungs-Plugins (Referenzen): github_poc, osv, sploitus
CVSS (Quelle / verkn. Eintraege): 9.8 — Werte aus Feed-Eintraegen; CVSS (CVE.org) kommt aus Anreicherung cve_org.

Eintraege mit Bezug zu CVE-2025-49704

Veroeffentlicht	Quelle	Titel	Severity	Kategorie
2025-08-04 08:15	bsi_csw	Version 1.2: Microsoft SharePoint - Massive Ausnutzung einer Zero-Day Schwachstelle	CRITICAL	government_cert
2025-07-22 00:00	cisa_kev	CVE-2025-49706 — Microsoft SharePoint Improper Authentication Vulnerability	CRITICAL	threat_intel
2025-07-22 00:00	cisa_kev	CVE-2025-49704 — Microsoft SharePoint Code Injection Vulnerability	CRITICAL	threat_intel
2025-07-20 00:00	cisa_kev	CVE-2025-53770 — Microsoft SharePoint Deserialization of Untrusted Data Vulnerability	CRITICAL	threat_intel

Externe Referenzen zu CVE-2025-49704

Bezeichnung	Typ	Entry	Quelle
GitHub Byungju/cve-research-lab: 주요 CVE 분석	POC	Version 1.2: Microsoft SharePoint - Massive Ausnutzung einer Zero-Day Sc	github_poc
GitHub GautamManglani/cs50-cybersecurity-final-project-sharepoint	POC	Version 1.2: Microsoft SharePoint - Massive Ausnutzung einer Zero-Day Sc	github_poc
GitHub J4ck3LSyN-Gen2/Reports: Reports that I gather from research over time for different purposes.	POC	Version 1.2: Microsoft SharePoint - Massive Ausnutzung einer Zero-Day Sc	github_poc
GitHub LuemmelSec/ToolShell	POC	Version 1.2: Microsoft SharePoint - Massive Ausnutzung einer Zero-Day Sc	github_poc
GitHub Rabbitbong/OurSharePoint-CVE-2025-53770: Do you really think SharePoint is safe?	POC	Version 1.2: Microsoft SharePoint - Massive Ausnutzung einer Zero-Day Sc	github_poc
GitHub dick318/awesome-stars	POC	Version 1.2: Microsoft SharePoint - Massive Ausnutzung einer Zero-Day Sc	github_poc
GitHub giterlizzi/secdb-feeds: SecDB - Security Feeds	POC	Version 1.2: Microsoft SharePoint - Massive Ausnutzung einer Zero-Day Sc	github_poc
GitHub grumby42/dfir-trainers	POC	Version 1.2: Microsoft SharePoint - Massive Ausnutzung einer Zero-Day Sc	github_poc
GitHub irsdl/ysonet: Deserialization payload generator for a variety of .NET formatters	POC	Version 1.2: Microsoft SharePoint - Massive Ausnutzung einer Zero-Day Sc	github_poc
GitHub lycgy2021-hash/444plus	POC	Version 1.2: Microsoft SharePoint - Massive Ausnutzung einer Zero-Day Sc	github_poc
GitHub mishra0230/Sharepoint-Vulnerability	POC	Version 1.2: Microsoft SharePoint - Massive Ausnutzung einer Zero-Day Sc	github_poc
GitHub rxerium/CISA-KEV: An automated repo to track Nuclei template scanning capabilities against the CISA KEV.	POC	Version 1.2: Microsoft SharePoint - Massive Ausnutzung einer Zero-Day Sc	github_poc
GitHub sangam14/my-awesome-stars: my personal gitstars	POC	Version 1.2: Microsoft SharePoint - Massive Ausnutzung einer Zero-Day Sc	github_poc
GitHub timoguin/stars: My starred repositories	POC	Version 1.2: Microsoft SharePoint - Massive Ausnutzung einer Zero-Day Sc	github_poc
GitHub ubitquity/warlock-ransomware-remediation: Warlock Ransomware (ToolShell) Incident Response & Mitigation	POC	Version 1.2: Microsoft SharePoint - Massive Ausnutzung einer Zero-Day Sc	github_poc
Sploitus: Exploit for Deserialization of Untrusted Data in Microsoft	EXPLOIT	Version 1.2: Microsoft SharePoint - Massive Ausnutzung einer Zero-Day Sc	sploitus
Sploitus: Exploit for Deserialization of Untrusted Data in Microsoft	EXPLOIT	Version 1.2: Microsoft SharePoint - Massive Ausnutzung einer Zero-Day Sc	sploitus
Sploitus: Microsoft SharePoint Server ToolPane Unauthenticated Remote Code Execution (aka ToolShell)	EXPLOIT	Version 1.2: Microsoft SharePoint - Massive Ausnutzung einer Zero-Day Sc	sploitus
Sploitus: Exploit for Deserialization of Untrusted Data in Microsoft	EXPLOIT	Version 1.2: Microsoft SharePoint - Massive Ausnutzung einer Zero-Day Sc	sploitus
Sploitus: 📄 Microsoft SharePoint Server ToolPane Unauthenticated Remote Code Execution	EXPLOIT	Version 1.2: Microsoft SharePoint - Massive Ausnutzung einer Zero-Day Sc	sploitus
Sploitus: 📄 Microsoft SharePoint Server ToolPane Authentication Bypass / Unsafe Deserialization	EXPLOIT	Version 1.2: Microsoft SharePoint - Massive Ausnutzung einer Zero-Day Sc	sploitus
OSV [ADVISORY]: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49704	OSV	Version 1.2: Microsoft SharePoint - Massive Ausnutzung einer Zero-Day Sc	osv
OSV [WEB]: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-49704	OSV	Version 1.2: Microsoft SharePoint - Massive Ausnutzung einer Zero-Day Sc	osv
OSV [ADVISORY]: https://www.microsoft.com/en-us/security/blog/2025/07/22/disrupting-active-exploitation-of-on-premises-sharepoint-vulner	OSV	Version 1.2: Microsoft SharePoint - Massive Ausnutzung einer Zero-Day Sc	osv

Alle CVEs