CVE-2026-20959
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
| Software | From | Fixed in |
|---|---|---|
| microsoft / sharepoint_server | - | 16.0.19127.20442 |
| microsoft / sharepoint_server | 2016 | 2016.x |
| microsoft / sharepoint_server | 2019 | 2019.x |
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime