Vulnerability Details CVE-2026-105713
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over an adjacent network.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 29.8%
CVSS Severity
CVSS v3 Score 5.7
Products affected by CVE-2026-105713
-
cpe:2.3:a:microsoft:sharepoint_server:-
-
cpe:2.3:a:microsoft:sharepoint_server:16.0.10417.20003
-
cpe:2.3:a:microsoft:sharepoint_server:16.0.17328.20246
-
cpe:2.3:a:microsoft:sharepoint_server:16.0.17328.20292
-
cpe:2.3:a:microsoft:sharepoint_server:16.0.17328.20362
-
cpe:2.3:a:microsoft:sharepoint_server:16.0.17928.20356
-
cpe:2.3:a:microsoft:sharepoint_server:16.0.17928.20396
-
cpe:2.3:a:microsoft:sharepoint_server:16.0.18526.20172
-
cpe:2.3:a:microsoft:sharepoint_server:16.0.18526.20286
-
cpe:2.3:a:microsoft:sharepoint_server:16.0.18526.20396
-
cpe:2.3:a:microsoft:sharepoint_server:16.0.18526.20424
-
cpe:2.3:a:microsoft:sharepoint_server:16.0.18526.20508
-
cpe:2.3:a:microsoft:sharepoint_server:16.0.18526.20518
-
cpe:2.3:a:microsoft:sharepoint_server:16.0.19127.20100
-
cpe:2.3:a:microsoft:sharepoint_server:16.0.19127.20262
-
cpe:2.3:a:microsoft:sharepoint_server:16.0.19127.20338
-
cpe:2.3:a:microsoft:sharepoint_server:16.0.19127.20378
-
cpe:2.3:a:microsoft:sharepoint_server:16.0.19127.20442
-
cpe:2.3:a:microsoft:sharepoint_server:16.0.19127.20518
-
cpe:2.3:a:microsoft:sharepoint_server:16.0.19725.20076
-
cpe:2.3:a:microsoft:sharepoint_server:16.0.19725.20210
-
cpe:2.3:a:microsoft:sharepoint_server:16.0.19725.20280
-
cpe:2.3:a:microsoft:sharepoint_server:16.0.19725.20384
-
cpe:2.3:a:microsoft:sharepoint_server:16.0.19725.20434
-
cpe:2.3:a:microsoft:sharepoint_server:16.0.19725.20522
-
cpe:2.3:a:microsoft:sharepoint_server:16.0.20326.20074
-
cpe:2.3:a:microsoft:sharepoint_server:16.0.20326.20082
-
cpe:2.3:a:microsoft:sharepoint_server:16.0.20326.20090
-
cpe:2.3:a:microsoft:sharepoint_server:16.0.20326.20094