Microsoft SharePoint Server Spoofing Vulnerability
CVE-2025-49706 is a spoofing vulnerability in Microsoft Office SharePoint (rated Important, CVSS 6.5).
1 version
Facts
- Microsoft id
CVE-2025-49706- Products
- Microsoft Office SharePoint
- Severity
- Important
- Impact
- Spoofing
- CVSS
- 6.5
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:F/RL:O/RC:C
- Exploited
- No
- Publicly disclosed
- No
- Exploitability
- Exploitation Less Likely
- Customer action required
- Yes
- Release
- 2025-Jul
- Assigned by
- Microsoft
- Weakness
- CWE-287: Improper Authentication
- MSRC revision
- 1.4
- First captured by us
- (from our first import of this list)
- Microsoft last modified
- Source
- Security updates · open the original at Microsoft
Microsoft's revision notes
- Revision 1.0, 2025-07-08:
Information published.
- Revision 1.1, 2025-07-21:
Updated one or more CVSS scores for the affected products. This is an informational change only.
- Revision 1.2, 2025-07-22:
Updated one or more CVSS scores for the affected products. This is an informational change only.
- Revision 1.3, 2025-07-24:
Corrected the Download and Article links in the Security Updates table. This is an informational change only.
- Revision 1.4, 2025-07-31:
Added an FAQ to explain that the security update KB for SharePoint Server 2016 applies to both Microsoft SharePoint Server 2016 and Microsoft SharePoint Enterprise…
Microsoft says
Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
What Microsoft changed
One version so far. If Microsoft edits it, each change shows here with what was removed and added.
First version we captured ·
The text as we first saw it
Seen by us · Microsoft's timestamp · Microsoft's page