← Back to CVE search

CVE-2026-20945

Microsoft Office SharePoint

Description

Improper neutralization of input during web page generation (-cross-site scripting-) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

CVSS 4.6EPSS 25.081999999999997%Risk 1.5
View source
Published
2026-04-14 18:16:43
Affected versions
unknown
Type
Installed app
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N