CISA Warns of Active Exploitation of SharePoint Vulnerabilities

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned on Tuesday that attackers are actively exploiting three vulnerabilities to breach internet-facing on-premises SharePoint servers.

According to the agency, the attacks target organizations running externally exposed SharePoint Server instances. CISA has urged administrators to install the necessary security updates as soon as possible to close the vulnerabilities that attackers are already exploiting.

CISA's Recommendations

The agency strongly recommends that organizations operating on-premises SharePoint servers urgently review the status of their installed updates and apply the fixes that address the three identified vulnerabilities.

Particular attention is paid to systems accessible from external networks, since these pose the greatest risk of attacks over the internet.

CISA did not disclose additional technical details about the vulnerabilities in its published advisory, noting only that they are being actively exploited and that immediate patching is required.

Administrators of systems running SharePoint Server in on-premises infrastructure should consult the official security bulletins for information on the available updates and their deployment plans.

Source: Bleeping Computer