MicrosoftRadarIndependent status for Microsoft services

Microsoft SharePoint Server Spoofing Vulnerability

CVE-2025-53771 is a spoofing vulnerability in Microsoft Office SharePoint (rated Important, CVSS 6.5).

1 version

Facts

Microsoft id
CVE-2025-53771
Products
Microsoft Office SharePoint
Severity
Important
Impact
Spoofing
CVSS
6.5
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
Exploited
No
Publicly disclosed
No
Exploitability
Exploitation Less Likely
Customer action required
Yes
Release
2025-Jul
Assigned by
Microsoft
Weakness
CWE-287: Improper Authentication
MSRC revision
3.6
First captured by us
(from our first import of this list)
Microsoft last modified
Source
Security updates · open the original at Microsoft

Microsoft's revision notes

  1. Revision 1.0, 2025-07-20: Information published.
  2. Revision 2.0, 2025-07-20: The security update is available for Microsoft SharePoint Server 2019.
  3. Revision 3.0, 2025-07-21: The security update is available for Microsoft SharePoint Server Subscription Edition.
  4. Revision 3.1, 2025-07-21: Added an FAQ and updated the CVSS score. This is an informational change only.
  5. Revision 3.2, 2025-07-21: Added an acknowledgement. This is an informational change only.
  6. Revision 3.3, 2025-07-22: Updated one or more CVSS scores for the affected products. This is an informational change only.
  7. Revision 3.4, 2025-07-22: Updated CWE value. This is an informational change only.
  8. Revision 3.4, 2025-07-24: Corrected the Download and Article links in the Security Updates table. This is an informational change only.
  9. Revision 3.5, 2025-07-31: Updated the executive summary with current information. This is an informational change only.
  10. Revision 3.6, 2025-07-31: Added an FAQ to explain that the security update KB for SharePoint Server 2016 applies to both Microsoft SharePoint Server 2016 and Microsoft SharePoint Enterprise…

Microsoft says

Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

Security updates,

Read Microsoft's full post

What Microsoft changed

One version so far. If Microsoft edits it, each change shows here with what was removed and added.

  1. First version we captured ·

    The text as we first saw it

    Seen by us · Microsoft's timestamp · Microsoft's page

Mentioning the same Microsoft ids