CVE-2025-54897
Published: 09 September 2025
Summary
CVE-2025-54897 is a high-severity Deserialization of Untrusted Data (CWE-502) vulnerability in Microsoft Sharepoint Server. Its CVSS base score is 8.8 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked in the top 7.6% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-2 (Flaw Remediation).
Threat & Defense at a Glance
Threat & Defense Details
Mitigating Controls (NIST 800-53 r5)AI
Directly mitigates the deserialization vulnerability by requiring timely identification, reporting, and patching of the specific flaw in Microsoft Office SharePoint.
Prevents exploitation of untrusted data deserialization by enforcing comprehensive input validation and error handling at SharePoint's network interfaces.
Addresses remote code execution from deserialization by implementing memory protections that restrict unauthorized code execution in vulnerable processes.
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Deserialization flaw in SharePoint directly enables unauthenticated RCE over the network on a public-facing server application, mapping cleanly to T1190.
NVD Description
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
Deeper analysisAI
CVE-2025-54897 is a deserialization of untrusted data vulnerability, classified under CWE-502, affecting Microsoft Office SharePoint. Published on 2025-09-09, it carries a CVSS v3.1 base score of 8.8 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), indicating high severity due to its potential for significant impact.
An authorized attacker with low privileges (PR:L) can exploit this vulnerability over the network (AV:N) with low attack complexity (AC:L) and no user interaction (UI:N). Successful exploitation enables remote code execution, compromising confidentiality, integrity, and availability at a high level (C:H/I:H/A:H).
Microsoft's Security Response Center update guide at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-54897 provides details on mitigation and patching.
Details
- CWE(s)