description: This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server.An authenticated attacker could exploit this vulnerability by sending a specially crafted request to an affected SharePoint server, aka 'Microsoft SharePoint Reflective XSS Vulnerability'.
problem types: Spoofing
affected:
{
product: Microsoft SharePoint Enterprise Server
vendor: Microsoft
versions:
status: affected, version: 2016
}
{
product: Microsoft SharePoint Server
vendor: Microsoft
versions:
status: affected, version: 2019
}
