{"id":"CVE-2026-110045","kind":"vulnerability","aliases":["CVE-2026-110045"],"related":[],"title":"Microsoft SharePoint: cross-site scripting lets an authorized user spoof pages","description":"Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.","summary":"Microsoft Office SharePoint does not neutralize input when generating web pages, so an authorized attacker can inject script or content that spoofs what other users see. The attack can be carried out over the network.","severity":"high","cvss":7.3,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["microsoft-office","on-premises","sharepoint","vendor"],"not_affected_if":["sharepoint-online"],"how_to_check":"- Check the installed SharePoint Server build against Microsoft's security update guide for CVE-2026-110045 (unknown from the sources given)","fix":null,"status":"open","published_at":"2026-11-10T19:18:21+00:00","first_seen_at":"2026-11-10T19:24:26+00:00","triaged_at":"2026-11-10T19:47:48+00:00","updated_at":"2026-11-10T19:47:48+00:00","category":"vendor","confidence":0.5,"triage":{"at":"2026-11-10T19:47:48Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Microsoft SharePoint: cross-site scripting lets an authorized user spoof pages","impact":"medium","summary":"Microsoft Office SharePoint does not neutralize input when generating web pages, so an authorized attacker can inject script or content that spoofs what other users see. The attack can be carried out over the network.","audience":"businesses","category":"vendor","nicknames":[],"who_cares":["sharepoint","microsoft-office","on-premises"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"spoofed page content and script run in other users' browsers","analyst_note":"Confirm affected SharePoint versions, the fixed build, and whether SharePoint Online is affected via the Microsoft Security Response Center entry for CVE-2026-110045.","how_to_check":"- Check the installed SharePoint Server build against Microsoft's security update guide for CVE-2026-110045 (unknown from the sources given)","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["sharepoint-online"],"who_is_affected":"Organizations running Microsoft SharePoint Server on premises where users have accounts with some access. The sources do not state affected versions or whether SharePoint Online is involved. unknown","user_interaction":"unknown","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000694,"input_tokens":4510,"output_tokens":485,"severity_before":"high"},"analyst_status":"queued","analyst_note":"Confirm affected SharePoint versions, the fixed build, and whether SharePoint Online is affected via the Microsoft Security Response Center entry for CVE-2026-110045.","search":"'-110045':15A,18A '-2026':14A,17A 'allow':78C 'attack':41B,54B,81C 'author':9A,40B,80C 'carri':57B 'content':46B 'cross':4A,71C 'cross-sit':3A,70C 'cve':13A,16A 'generat':35B,69C 'improp':62C 'inject':43B 'input':33B,65C 'let':7A 'microsoft':1A,20B,27B,75C 'microsoft-offic':19B 'network':61B,87C 'neutral':32B,63C 'offic':21B,28B,76C 'on-premis':22B 'page':12A,37B,68C 'perform':83C 'premis':24B 'script':6A,44B,73C 'see':52B 'sharepoint':2A,25B,29B,77C 'site':5A,72C 'spoof':11A,48B,84C 'user':10A,51B 'vendor':26B 'web':36B,67C","nicknames":[],"mitigations":[],"who_affected":"Organizations running Microsoft SharePoint Server on premises where users have accounts with some access. The sources do not state affected versions or whether SharePoint Online is involved. unknown","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["high","microsoftoffice","onpremises","sharepoint","vendor"],"campaign_type":null,"search_a":"'-110045':15A,18A '-2026':14A,17A 'author':9A 'cross':4A 'cross-sit':3A 'cve':13A,16A 'let':7A 'microsoft':1A 'page':12A 'script':6A 'sharepoint':2A 'site':5A 'spoof':11A 'user':10A","search_b":"'attack':41B,54B 'author':40B 'carri':57B 'content':46B 'generat':35B 'inject':43B 'input':33B 'microsoft':20B,27B 'microsoft-offic':19B 'network':61B 'neutral':32B 'offic':21B,28B 'on-premis':22B 'page':37B 'premis':24B 'script':44B 'see':52B 'sharepoint':25B,29B 'spoof':48B 'user':51B 'vendor':26B 'web':36B","search_c":"'allow':78C 'attack':81C 'author':80C 'cross':71C 'cross-sit':70C 'generat':69C 'improp':62C 'input':65C 'microsoft':75C 'network':87C 'neutral':63C 'offic':76C 'page':68C 'perform':83C 'script':73C 'sharepoint':77C 'site':72C 'spoof':84C 'web':67C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:18:21+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-110045","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110045","severity":null,"published_at":"2026-11-10T19:18:21+00:00","modified_at":"2026-11-10T19:18:21+00:00","first_seen_at":"2026-11-10T19:24:26+00:00","fetched_at":"2026-11-10T19:24:26+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}