MICROSOFT-CVE-2026-20959

MEDIUM4.6

Microsoft SharePoint Server Spoofing Vulnerability

Published Jan 13, 2026

Modified 4 months ago

Details

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

References

ADVISORY

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20959

CVSS Analysis

CVSS v2.0

4.6

Upstream

CVE-2026-20959

Ecosystems

Timeline

PublishedJan 13, 2026

ModifiedJan 13, 2026