MEDIUM CWE-287
CVE-2025-53771
Microsoft SharePoint Server Spoofing Vulnerability
Microsoft·SharePoint Enterprise Server 2016
6.5/ 10
CVSS 3.1
Medium severity
100%
EPSS exploit odds
Chance of exploitation in the next 30 days
Among the very highest of all CVEs
Not listed
CISA KEV catalog
No confirmed in-the-wild exploitation on CISA's list.
Timeline
- Published
- Jul 20, 2025
- Updated
- Feb 13, 2026
- First covered
- Oct 2, 2026
- Latest story
- 1 month ago
Summary
Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
CWE-287Improper Authentication
Attack profile
Attack vectorNetwork
ComplexityLow
PrivilegesNone
User interactionNone
ScopeUnchanged
ConfidentialityLow
IntegrityLow
AvailabilityNone
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:CAffected products
- Microsoft SharePoint Enterprise Server 201616.0.0 to before 16.0.5513.1001
- Microsoft SharePoint Server 201916.0.0 to before 16.0.10417.20037
- Microsoft SharePoint Server Subscription Edition16.0.0 to before 16.0.18526.20508