CVE-2025-53771

unknowncovered by 1 sourcefirst seen 2025-07-21

[Update on July 23, 2025] On July 20, 2025, Microsoft released patches for a vulnerability of insufficient path traversal affecting SharePoint Enterprise Server 2016, SharePoint Server 2019 and...

CSIRTS triage

What: There is a vulnerability of insufficient path traversal.
Who is affected: Deployments of SharePoint Enterprise Server 2016 and SharePoint Server 2019.
Urgency: Remediation is urgent due to confirmed exploitation.
Action: Apply the patches released on July 20, 2025.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch CVE-2025-53771

Get an email if CVE-2025-53771 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.

Exploitation outlook

Exploitation likely imminentEPSS puts this in the most-targeted tier (99.9% 30-day exploitation probability). Prioritize alongside KEV items. Riskier than 100% of all EPSS-scored CVEs.

Advisory coverage (1)

unknown[Update] Multiple vulnerabilities in Microsoft SharePoint (July 21, 2025)cert-fr-alerte · 2025-07-21

External references

NVD record for CVE-2025-53771

CVE.org record

Embed the live status

— this badge updates automatically when the KEV or exploit status changes. How to embed it →

[![CVE-2025-53771 status](https://www.csirts.com/badge/CVE-2025-53771)](https://www.csirts.com/cve/CVE-2025-53771)