CVE-2024-26251 Microsoft SharePoint Server Spoofing Vulnerability

2024-04-0917:01:07

CWE-79

microsoft

github.com

cve-2024-26251

microsoft

sharepoint

server

spoofing

vulnerability

6.8 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:H/RL:O/RC:C

6.8 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

39.3%

JSON

CNA Affected

[
  {
    "cpes": [
      "cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*"
    ],
    "vendor": "Microsoft",
    "product": "Microsoft SharePoint Server 2019",
    "versions": [
      {
        "status": "affected",
        "version": "16.0.0",
        "lessThan": "16.0.10409.20027",
        "versionType": "custom"
      }
    ],
    "platforms": [
      "x64-based Systems"
    ]
  },
  {
    "cpes": [
      "cpe:2.3:a:microsoft:sharepoint_server:-:*:*:*:subscription:*:*:*"
    ],
    "vendor": "Microsoft",
    "product": "Microsoft SharePoint Server Subscription Edition",
    "versions": [
      {
        "status": "affected",
        "version": "16.0.0",
        "lessThan": "16.0.17328.20246",
        "versionType": "custom"
      }
    ],
    "platforms": [
      "x64-based Systems"
    ]
  },
  {
    "cpes": [
      "cpe:2.3:a:microsoft:sharepoint_server:2016:*:*:*:*:*:*:*"
    ],
    "vendor": "Microsoft",
    "product": "Microsoft SharePoint Server 2016",
    "versions": [
      {
        "status": "affected",
        "version": "16.0.0.0",
        "lessThan": "16.0.5443.1000",
        "versionType": "custom"
      }
    ],
    "platforms": [
      "Unknown"
    ]
  }
]