Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple Remote Code Execution vulnerabilities:
  - Remote Code Execution Vulnerabilites.
    (CVE-2025-29793, CVE-2025-29794, CVE-2025-27747, CVE-2025-29820)

The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by multiple Remote Code Execution vulnerabilities:
  - Remote Code Execution Vulnerabilites.
    (CVE-2025-26642, CVE-2025-27747, CVE-2025-29793, CVE-2025-29794 )

The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by multiple Remote Code Execution vulnerabilities:
  - Remote Code Execution Vulnerabilites.
    (CVE-2025-29793, CVE-2025-29794)

ID	Name	Product	Family	Severity
234126	Security Updates for Microsoft SharePoint Server 2016 (April 2025)	Nessus	Windows : Microsoft Bulletins	high
234047	Security Updates for Microsoft SharePoint Server 2019 (April 2025)	Nessus	Windows : Microsoft Bulletins	high
234031	Security Updates for Microsoft SharePoint Server Subscription Edition (April 2025)	Nessus	Windows : Microsoft Bulletins	high

Detections

Analytics

CVE-2025-29793

high

Tenable Plugins

high

high

high