← Back to browse · API

CVE-2025-54897

Severity
HIGH
CVSS
8.8
EPSS
0.19297
Risk score
41.95
CISA KEV
No
PoC
No
Published
2025-09-09
Modified
2026-02-26
First seen
2026-08-07
Aliases
EUVD-2025-27358, GHSA-RVP7-398F-7V5C
Products
Microsoft:Microsoft SharePoint Enterprise Server 2016 16.0.0 <16.0.5517.1000, Microsoft:Microsoft SharePoint Server 2019 16.0.0 <16.0.10417.20047, Microsoft:Microsoft SharePoint Server Subscription Edition 16.0.0 <16.0.19127.20100
Sources
euvd EUVD-2025-27358

Description

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

References