CISA urges SharePoint admins to patch three actively exploited flaws

Intelligence Summary

CISA says attackers are actively exploiting three vulnerabilities in on-premises Microsoft SharePoint Server exposed to the internet. The agency warns administrators to review exposure and apply available patches as soon as possible. Exploitation could allow attackers to gain unauthorized access and compromise systems running SharePoint. Organizations with internet-facing deployments should prioritize remediation and check for related indicators. Microsoft SharePoint patching and tightening external access are the main near-term actions.

Recommended Action

Prioritize immediate review, validate exposure, and patch or mitigate affected systems.

Topics