Microsoft SharePoint Server Spoofing Vulnerability (CNVD-2022-87652)

2022-11-1000:00:00

China National Vulnerability Database

www.cnvd.org.cn

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

JSON

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft Corporation (USA). Microsoft SharePoint Server is vulnerable to spoofing. An attacker could exploit the vulnerability with a specially crafted website to spoof content and trick users into believing that the site is legitimate, in conjunction with other vulnerabilities in the web service to launch an attack.