Description
<p>A tampering vulnerability exists when Microsoft SharePoint Server fails to properly handle profile data. An attacker who successfully exploited this vulnerability could modify a targeted user's profile data.</p> <p>To exploit the vulnerability, an attacker would need to be authenticated on an affected SharePoint Server. The attacker would then need to send a specially modified request to the server, targeting a specific user.</p> <p>The security update addresses the vulnerability by modifying how Microsoft SharePoint Server handles profile data.</p>
Remediation
References
Related Vulnerabilities
WordPress Plugin Elementor Website Builder Security Bypass (3.0.13)
Liferay Portal Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-5327)
WordPress Plugin KN Fix Your Title Cross-Site Scripting (1.0.1)
Liferay Portal Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2025-62252)