Description

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Remediation

References

CVE-2025-49712

Related Vulnerabilities

osCommerce Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2015-2965)

WordPress Plugin WP Maps-Display Google Maps Perfectly with Ease Cross-Site Scripting (4.0.4)

Oracle JRE CVE-2013-2431 Vulnerability (CVE-2013-2431)

MySQL Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2008-7247)

Magento Improper Input Validation Vulnerability (CVE-2022-24086)

Severity

High

Classification

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities CWE-502 CVE-2025-49712