PT-2025-28603

CVE-2025-49706

·

Published

2025-07-08

·

Updated

2026-10-09

Description by

CVSS 2.0
7.5
High
MetricsAV:N/AC:L/Au:S/C:C/I:P/A:N
Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server (affected versions not specified) Microsoft SharePoint Server Subscription Edition (affected versions not specified) Microsoft SharePoint Foundation (affected versions not specified)
Description An improper authentication flaw exists in Microsoft Office SharePoint. This issue allows an attacker to perform spoofing attacks over a network. The flaw is specifically related to an authentication bypass within the ToolPane component.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾