组合风险、利用情报和受影响对象,快速定位需要优先处置的漏洞。
| 漏洞与影响对象 | 风险等级 | CVSS | EPSS | 利用情报 | 披露时间 | |
|---|---|---|---|---|---|---|
| Microsoft SharePoint Server - WS-Federation BinaryFormatter Deserialization RCE | 严重 | — | — | PoCEXP | ||
| Microsoft SharePoint Server - Authentication Bypass | 高危 | — | — | PoCEXP | ||
| SharePoint Webshell - ToolShell | 严重 | — | — | PoCEXP | ||
| Microsoft SharePoint Server - Authentication Bypass (ToolShell) | 中危 | 6.5 | — | PoCEXP | ||
| Microsoft SharePoint Server - Remote Code Execution (ToolShell) | 严重 | 9.8 | — | PoCEXP | ||
| CVE-2024-38094 | 高危 | 7.2 | 84.4% | PoCEXP | ||
| Sharepoint List - Detect | 中危 | 5.3 | — | PoCEXP | ||
| Microsoft SharePoint - Authentication Bypass | 严重 | 9.8 | 94.4% | PoCEXP | ||
| CVE-2023-24955 | 高危 | 7.2 | 92.1% | PoCEXP | ||
| CVE-2023-21716 | 严重 | 9.8 | 88.6% | PoCEXP | ||
| Microsoft SharePoint 信息泄露漏洞 | 中危 | 5.3 | 8.7% | PoCEXP | ||
| Microsoft SharePoint - Remote Code Execution | 高危 | 8.6 | 77.4% | PoCEXP | ||
| CVE-2020-1147 | 高危 | 7.8 | 92.8% | PoCEXP | ||
| Microsoft SharePoint - Remote Code Execution | 严重 | 9.8 | 94.4% | PoCEXP | ||
| CVE-2017-11826 | 高危 | 7.8 | 89.7% | PoCEXP | ||
| CVE-2012-2539 | 高危 | 7.8 | 81.9% | PoCEXP | ||
| CVE-2012-1889 | 高危 | 8.8 | 93.1% | PoCEXP | ||
| CVE-2010-3964 | 高危 | 7.5 | 90.1% | PoCEXP | ||
| CVE-2009-3830 | 中危 | 5.0 | 73.9% | PoCEXP |