CVE Catalog
CVE-2026-62829
MediumCVSS 4.6Exploitation Probability (EPSS)
Low risk0.30%
23th percentile - higher than 23% of all known CVEs
Summary
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
Risk Assessment
An attacker could inject malicious script, potentially leading to user impersonation or session theft.
Recommendation
Update Microsoft Office SharePoint to the latest version and apply XSS-related security patches.
Original NVD description (English source)
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.