CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-47172

Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 55.1%

CVSS Severity

CVSS v3 Score 8.8

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-47172

Products affected by CVE-2025-47172

Microsoft » Sharepoint Enterprise Server » Version: 2016

cpe:2.3:a:microsoft:sharepoint_enterprise_server:2016
Microsoft » Sharepoint Server » Version: N/A

cpe:2.3:a:microsoft:sharepoint_server:-
Microsoft » Sharepoint Server » Version: 16.0.17328.20246

cpe:2.3:a:microsoft:sharepoint_server:16.0.17328.20246
Microsoft » Sharepoint Server » Version: 16.0.17328.20292

cpe:2.3:a:microsoft:sharepoint_server:16.0.17328.20292
Microsoft » Sharepoint Server » Version: 16.0.17328.20362

cpe:2.3:a:microsoft:sharepoint_server:16.0.17328.20362
Microsoft » Sharepoint Server » Version: 16.0.17928.20356

cpe:2.3:a:microsoft:sharepoint_server:16.0.17928.20356
Microsoft » Sharepoint Server » Version: 16.0.17928.20396

cpe:2.3:a:microsoft:sharepoint_server:16.0.17928.20396
Microsoft » Sharepoint Server » Version: 2019

cpe:2.3:a:microsoft:sharepoint_server:2019

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-47172

Products

Pricing

Contact Us