KEVIntel

Vulnerability detail

Enriched intelligence for a single CVE

Back to KEVs

8.8

CVSS
High

CVE-2025-47172

PUBLISHED

Microsoft SharePoint Server Remote Code Execution Vulnerability

Exploited in the wild Remote Low complexity No user interaction

Vendor: Microsoft
Product: Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition
Published: Jun 10, 2025
EPSS: —

Description

Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVSS scores

CVSS v3.1 8.8 High

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation status

Exploited in the wild

Recorded 2025-06-11 07:01:39 UTC · Source

SSVC decision points

Exploitation: none
Automatable: No
Technical impact: total

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-47172

Known exploited vulnerability sources

Catalogues that list this CVE as a known exploited vulnerability.

Source	Added
The Shadowserver (via CIRCL)	Jun 11, 2025

Timeline

CVE ID Reserved

May 01, 2025
CVE Published to Public

June 10, 2025
Added to KEVIntel

June 11, 2025