Description
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9Attack Vector: Network
Complexity: Low
Privileges: Low
User Interaction: None
Scope: Unchanged
Confidentiality: High
Integrity: High
Availability: High
Affected Packages2 packages
🔴Vulnerability Details
2CVEListMicrosoft SharePoint Server Spoofing Vulnerability↗2025-12-09 GHSAGHSA-c834-93jr-pfcj: Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to p↗2025-12-09 📋Vendor Advisories
1MicrosoftMicrosoft SharePoint Server Spoofing Vulnerability↗2025-12-09 🕵️Threat Intelligence
1WizCVE-2025-64672 Impact, Exploitability, and Mitigation Steps | Wiz↗