Skip to content

CVE record · 1 source

CVE-2026-109504

CVSS 7.3

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to…

Vendor: Microsoft
Product: Microsoft SharePoint Server Subscription Edition
CVSS v3.1: 7.3 AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
Weakness: CWE-79
Exposure class: Collaboration

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

36

CVE NVD 3h ago

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to…

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

CVSS 7.3 CVE-2026-109504 Microsoft