CVE-2025-49706
Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
Explotada activamente
- En el catálogo CISA de vulnerabilidades explotadas desde el 22 jul 2025
- Las agencias federales de EE. UU. deben corregirla antes del 23 jul 2025 (BOD 22-01)
- Primer ataque observado 9 días después de la divulgación
- Confirmada por sensores, no solo por informes
- Utilizada en campañas de ransomware
Disconnect public-facing versions of SharePoint Server that have reached their end-of-life (EOL) or end-of-service (EOS) to include SharePoint Server 2013 and earlier versions. For supported versions, please follow the mitigations according to CISA (URL listed below in Notes) and vendor instructions (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.
Fuente: CISA KEV · 1 oct 2026 1 oct 2026 1 oct 2026 30 sept 2026 29 sept 2026 28 sept 2026
Puntuación CVSS6.5 / 10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:NTipo de debilidad (CWE)CWE-287
Fabricantesmicrosoft
Productos afectados
| Fabricantes | Producto | Versiones |
|---|---|---|
| microsoft | sharepoint enterprise server | 2016 |
| microsoft | sharepoint server | < 16.0.18526.20424 |
Artículos relacionados
This product uses the NVD API but is not endorsed or certified by the NVD.