You are using an out of date browser. It may not display this or other websites correctly. You should upgrade or use an alternative browser.
cve-2025-47172
About this tag
CVE-2025-47172 is a critical SQL injection vulnerability in Microsoft SharePoint Server that allows authenticated attackers to execute arbitrary code over a network. The flaw stems from improper neutralization of special elements in SQL commands, affecting SharePoint Server 2016, SharePoint Server 2019, and SharePoint Server Subscription Edition. Discussions on WindowsForum cover the vulnerability's impact, affected versions, and steps to apply security updates to mitigate the risk. This tag aggregates threads and resources for IT administrators and security professionals seeking to understand and address CVE-2025-47172 in their SharePoint environments.
CVE-2025-47172 is a critical vulnerability in Microsoft SharePoint Server that allows authorized attackers to execute arbitrary code over a network due to improper neutralization of special elements used in SQL commands, commonly known as SQL injection. This vulnerability affects multiple...