Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 1 product
🟠 #Microsoft Office SharePoint, Cross-site Scripting (XSS), #CVE-2026-47639 (Medium) -DC-Jun2026-362 https://dailycve.com/microsoft-office-sharepoint-cross-site-scripting-xss-cve-2026-47639-medium-dc-jun2026-362/
Post summary
The post notes CVE-2026-47639 as a Medium‑severity XSS vulnerability in Microsoft Office SharePoint, but it provides no PoC, exploit code, active exploitation reports, or patch details.
3 of 3 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | microsoft | sharepoint_server | - | - | - |
| App | microsoft | sharepoint_server | 2016 | - | - |
| App | microsoft | sharepoint_server | 2019 | - | - |