Spoofing Vulnerability in Microsoft SharePoint Server Products
CVE-2025-21393

6.3MEDIUM

Key Information:

Vendor
Microsoft
Status
Microsoft Sharepoint Enterprise Server 2016
Microsoft Sharepoint Server 2019
Microsoft Sharepoint Server Subscription Edition
Vendor
CVE Published:
14 January 2025

Summary

This vulnerability in Microsoft SharePoint Server allows attackers to spoof content, which could lead to unauthorized actions or disclosure of information. An exploit could enable malicious actors to present themselves as legitimate users, compromising the integrity and security of user data. Organizations should apply the recommended patches and updates to mitigate this risk effectively.

Affected Version(s)

Microsoft SharePoint Enterprise Server 2016 x64-based Systems 16.0.0 < 16.0.5483.1001

Microsoft SharePoint Server 2019 x64-based Systems 16.0.0 < 16.0.10416.20041

Microsoft SharePoint Server Subscription Edition x64-based Systems 16.0.0 < 16.0.17928.20356

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisory

CVSS V3.1

Score:
6.3
Severity:
MEDIUM
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.