Product:
Microsoft Office SharePoint
Summary
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. This vulnerability can lead to significant impacts on confidentiality, integrity, and availability. Attackers can exploit this flaw to gain unauthorized access and execute malicious code.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8 | CVE-2025-62204 |
Exploitation
To exploit this vulnerability, an attacker must have authorized access to the system and can send specially crafted data to the affected Microsoft Office SharePoint application. By manipulating the deserialization process, the attacker can execute arbitrary code on the server, potentially leading to a full compromise of the system.
Affected Products
- Microsoft Office SharePoint: Affected by deserialization issues that allow code execution over a network.
Mitigation
To mitigate this vulnerability, it is recommended to apply the latest security updates provided by Microsoft. Additionally, organizations should implement strict access controls and monitor network traffic for any suspicious activities that may indicate exploitation attempts.