CVE Catalog

CVE-2023-36890

MediumCVSS 6.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
1.64%

73th percentile - higher than 73% of all known CVEs

Summary

A vulnerability in Microsoft SharePoint Server allows for information disclosure, potentially leading to unauthorized access to sensitive data.

Risk Assessment

Organizations may be exposed to leaks of confidential information, which could result in loss of customer trust and potential legal consequences.

Recommendation

It is recommended to update Microsoft SharePoint Server to the latest version to patch this vulnerability and to monitor access to sensitive data.

Original NVD description (English source)

Microsoft SharePoint Server Information Disclosure Vulnerability

Vulnerability data from NVD (NIST) · CISA KEV · EPSS