Description

Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

Severity (CVSS)

Base score9.6
SeverityCritical
VersionCVSS 3.1
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
Provided byCNA

Weaknesses

  • CWE-918 — CWE-918: Server-Side Request Forgery (SSRF)

Affected products

VendorProductVersions
MicrosoftMicrosoft SharePoint Online-

References

Authoritative sources

This page is a snapshot. For the latest enrichment and updates, view the record on CVE.org or the NVD.

Generated from the official CVE List on 07 Aug 2026 07:02 UTC.