KB-2344 Information about the Microsoft SharePoint Server Vulnerability (CVE-2025-53770 and CVE-2025-53771)

pauline.delacruz — Thu, 24 Jul 2025 16:25:56 GMT

Current Revision posted to Appian Knowledge Base by pauline.delacruz on 7/24/2025 4:25:56 PM

On 19-Jul-2025, Microsoft announced active exploitation of two vulnerabilities against its on-premise Microsoft SharePoint Server software.

Appian does not use on-premise Microsoft SharePoint software and is not impacted by any related CVEs. We will continue to monitor the situation and provide any updates as appropriate.

Additional Notes:

The following CVEs were released with additional information on the scope of the vulnerability:

CVE-2025-53770 - (“Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an unauthorized attacker to execute code over a network.”)
CVE-2025-53771 - (“Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.”)

Supporting Documentation:

Affected Versions

This article applies to all supported versions of Appian.

Last reviewed: July 22, 2025