Product:
Microsoft Office SharePoint
Summary
Improper neutralization of input during web page generation allows an authorized attacker to perform spoofing over a network. This vulnerability can lead to significant security risks, including unauthorized access and data manipulation. It is crucial for users to be aware of this issue to protect their systems.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.8 | CVE-2025-64672 |
Exploitation
An attacker can exploit this vulnerability by crafting a malicious web page that takes advantage of the improper input handling in Microsoft Office SharePoint. When an authorized user visits the compromised page, the attacker can execute scripts in the context of the user’s session, potentially leading to data theft or unauthorized actions within the application.
Affected Products
- Microsoft Office SharePoint: A web-based collaboration platform that integrates with Microsoft Office.
Mitigation
To mitigate this vulnerability, it is recommended to apply the latest security updates provided by Microsoft. Users should also implement security best practices, such as input validation and sanitization, to prevent cross-site scripting attacks.