CVE-2026-64897
MediumCVSS 4.6Exploitation Probability (EPSS)
Low risk21th percentile - higher than 21% of all known CVEs
Summary
A cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint is caused by improper input neutralization during web page generation. It allows an authorized attacker to perform spoofing over a network.
Risk Assessment
The risk involves the possibility of manipulating content displayed to SharePoint users, which could lead to data theft or phishing within the organization.
Recommendation
It is recommended to immediately apply security updates provided by Microsoft for SharePoint and implement input filtering and validation mechanisms.
Original NVD description (English source)
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.