CVE-2025-64672: Microsoft SharePoint Server Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
Other sources
Microsoft SharePoint Server Spoofing Vulnerability
— Microsoft
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-64672?
CVE-2025-64672 is classified as a critical vulnerability due to its potential for allowing spoofing attacks.
How do I fix CVE-2025-64672?
To fix CVE-2025-64672, apply the latest patches provided by Microsoft for SharePoint Server Subscription Edition.
What type of attack does CVE-2025-64672 enable?
CVE-2025-64672 enables cross-site scripting attacks, allowing authorized attackers to spoof user interactions.
Which software is affected by CVE-2025-64672?
CVE-2025-64672 affects Microsoft SharePoint Server Subscription Edition.
Who is at risk due to CVE-2025-64672?
Organizations using the affected versions of Microsoft SharePoint Server are at risk if they do not apply the security updates.