Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.1

Microsoft Office SharePoint: Unauthorized Network Access Through SharePoint

CVE-2025-53760 · published 1 year ago
Summary

An authorized attacker could use Office SharePoint to access and manipulate other network resources without permission. This could potentially allow them to view or change sensitive data. To protect your network, ensure that you have the latest updates installed for Office SharePoint.

What to do
  • Update microsoft sharepoint_server to version 16.0.18526.20518 or later.
Affected software
VendorProductAffected versions
microsoft sharepoint_server < 16.0.18526.20518
2016
2019
cpe:2.3:a:microsoft:sharepoint_server:*:*:*:*:subscription:*:*:*
Original advisory text
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
7.1 High
Exploitation
21% chance of attack within 30 days
Type
CWE-918Server-Side Request Forgery (SSRF)
Timeline
Published12 Aug 2025
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2025-53760 · NVD
Track software like this
Free during beta