Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Microsoft SharePoint Enterprise Server 2016 | 16.0.0, 16.0.0, 16.0.0, 2019, LTSC 2021, LTSC 2024 |
Downstream vendors/products affected by this vulnerability
| Vendor | Product | Source | Confidence |
|---|---|---|---|
| microsoft | microsoft sharepoint server subscription edition | mitre_affected | 90% |
| microsoft | microsoft sharepoint | mitre_affected | 90% |
Updated product to include Microsoft SharePoint Server 2019/LTSC 2021/LTSC 2024, changed severity to CRITICAL, and noted no available exploit.
Updated description with additional details, changed severity to HIGH, added new CWE, and noted that patch information is unclear.
Added a detailed description of the vulnerability and marked it as actively exploited with an exploit available.
Initial creation
