Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
CVSS
No CVSS.
References
Link | Resource |
---|---|
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53771 | Vendor Advisory |
https://www.bleepingcomputer.com/news/microsoft/microsoft-sharepoint-zero-day-exploited-in-rce-attacks-no-patch-available/ | Press/Media Coverage |
Configurations
Configuration 1 (hide)
|
History
14 Aug 2025, 17:29
Type | Values Removed | Values Added |
---|---|---|
First Time |
Microsoft sharepoint Server
Microsoft |
|
CPE | cpe:2.3:a:microsoft:sharepoint_server:*:*:*:*:subscription:*:*:* cpe:2.3:a:microsoft:sharepoint_server:2016:*:*:*:enterprise:*:*:* cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:* |
|
References | () https://www.bleepingcomputer.com/news/microsoft/microsoft-sharepoint-zero-day-exploited-in-rce-attacks-no-patch-available/ - Press/Media Coverage | |
References | () https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53771 - Vendor Advisory |
31 Jul 2025, 20:15
Type | Values Removed | Values Added |
---|---|---|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : unknown |
CWE | ||
Summary | Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network. |
22 Jul 2025, 21:15
Type | Values Removed | Values Added |
---|---|---|
Summary | Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network. | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
CWE | CWE-287 |
21 Jul 2025, 22:15
Type | Values Removed | Values Added |
---|---|---|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.1 |
21 Jul 2025, 00:15
Type | Values Removed | Values Added |
---|---|---|
CWE | CWE-707 CWE-22 |
|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : unknown |
References |
|
20 Jul 2025, 23:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2025-07-20 23:15
Updated : 2025-08-14 17:29
NVD link : CVE-2025-53771
Mitre link : CVE-2025-53771
JSON object : View
Products Affected
microsoft
- sharepoint_server
CWE
No CWE.