Microsoft / Microsoft SharePoint Enterprise Server 2016 · Microsoft / Microsoft SharePoint Server 2019 · Microsoft / Microsoft SharePoint Server Subscription Edition
6.5 · CVSS 3.1MediumCISA KEV
CISA lists this CVE as exploited in the wild. Patch it before anything rated by score alone.
Description
Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.