CVE-2025

Api.Msrc.Microsoft • December 9, 2025

Share: View original

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

SonicWall SMA1000 Zero-Day Vulnerability CVE-2025-40602 Exploited SonicWall has addressed a medium-severity zero-day vulnerability in the SMA1000 Appliance Management Console. This vulnerability is actively being exploited, affecting users of the SonicWall SMA1000. The company has released fixes to mitigate the risk associated with this security flaw. 37 sources 61

Extracted Entities

Attack Types (1)

Cross-site Scripting

Platforms (1)

Microsoft Office SharePoint

Vulnerabilities (1)