CVE-2021-28478 Microsoft SharePoint Server Spoofing Vulnerability

Description

Microsoft SharePoint Server Spoofing Vulnerability

Affected products and versions

Product	Affected versions	Fixed in
Microsoft SharePoint Enterprise Server 2016 16.0	16.0.0 → < 16.0.5161.1000	16.0.5161.1000
Microsoft SharePoint Server 2019 16.0	16.0.0 → < 16.0.10374.20000	16.0.10374.20000
Microsoft SharePoint Foundation 2013 Service Pack 1 15.0	15.0.0 → < 15.0.5345.1000	15.0.5345.1000

Other CVEs of Microsoft SharePoint Enterprise Server 2016

The 337 CVEs of Microsoft SharePoint Enterprise Server 2016 →

CVE-2026-97783 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint… 8.1 High CVE-2026-69943 Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows… 8.8 High CVE-2026-62917 Improper input validation in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a… 4.6 Medium CVE-2026-62839 Insufficiently protected credentials in Microsoft Office SharePoint allows an authorized attacker to perform spoofing… 6.5 Medium