Priority MEDIUM 60
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.22566 · Published 2025-06-10 · Fixed in 16.0.5504.1001, 16.0.10417.20018 +1 CWE-502
Priority MEDIUM 60
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.21819 · Published 2025-06-10 · Fixed in 16.0.5504.1001, 16.0.10417.20018 +1 CWE-502
Priority MEDIUM 44
Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01764 · Published 2025-06-10 · Fixed in 16.0.5504.1001, 16.0.10417.20018 +1 CWE-89
