{"id":2265,"date":"2025-07-23T15:30:27","date_gmt":"2025-07-23T15:30:27","guid":{"rendered":"https:\/\/www.trusted-id.eu\/nieuws\/vulnerability-in-sharepoint-2019-sharepoint-2016\/"},"modified":"2026-01-26T16:06:31","modified_gmt":"2026-01-26T16:06:31","slug":"vulnerability-in-sharepoint-2019-sharepoint-2016","status":"publish","type":"nieuws","link":"https:\/\/www.trusted-id.eu\/en\/nieuws\/vulnerability-in-sharepoint-2019-sharepoint-2016\/","title":{"rendered":"Vulnerability in SharePoint 2019\/SharePoint 2016"},"content":{"rendered":"\n<div id=\"text_block-block_be18176342f787ef8d6410d25bbce469\" class=\"text_block alignfull alignfull\">\n\t<style>\n\t\t.text_block {\n\t\t\tposition:relative;\n\t\t\tpadding-top:60px;\n\t\t\tpadding-bottom:60px;\n\t\t}\n\t<\/style>\n\t<div class=\"container\">\n\t\t<div class=\"row\">\n\t\t\t<div class=\"col-md-2\">\n\t\t\t\t\n\t\t\t<\/div>\n\t\t\t<div class=\"col-md-8\">\n\t\t\t\t<p>If you use Microsoft Identity Manager 2016, including the Portal, and SharePoint, the following is useful to know:  <\/p>\n<p>There is a vulnerability in SharePoint 2019 and SharePoint 2016 that is <strong><u>currently being actively exploited<\/u><\/strong> and has been warned about, see:<\/p>\n<p><a href=\"https:\/\/www.ncsc.nl\/actueel\/nieuws\/2025\/07\/20\/kwetsbaarheden-in-microsoft-sharepoint-server-actief-misbruikt\" data-ogsc=\"\" data-outlook-id=\"a0815ddc-ad0b-49e8-9f8d-94d56563c0dc\">Latest update: Vulnerabilities in Microsoft SharePoint Server actively exploited | News item | National Cyber \u200b\u200bSecurity Center<\/a><\/p>\n<p>Microsoft has released a customer guidance document explaining what to do, see:<\/p>\n<p><a href=\"https:\/\/msrc.microsoft.com\/blog\/2025\/07\/customer-guidance-for-sharepoint-vulnerability-cve-2025-53770\/\" data-ogsc=\"\" data-outlook-id=\"02cbb140-8c51-4054-9496-367d7aa932ec\">https:\/\/msrc.microsoft.com\/blog\/2025\/07\/customer-guidance-for-sharepoint-vulnerability-cve-2025-53770\/<\/a><\/p>\n<p>For the version of SharePoint that you have operational, you need to do the following:<\/p>\n<ol>\n<li>Install the SharePoint <strong>July 2025<\/strong> update:<br \/>\nSP2019: <a href=\"https:\/\/support.microsoft.com\/help\/5002741\" data-ogsc=\"\" data-outlook-id=\"32abd0c2-9df5-4018-aaff-d9efb8173c3c\">https:\/\/support.microsoft.com\/help\/5002741<\/a><br \/>\nSP2016: <a href=\"https:\/\/support.microsoft.com\/help\/5002744\" data-ogsc=\"\" data-outlook-id=\"d89fd535-3a67-4844-a7d0-90ef05a06668\">https:\/\/support.microsoft.com\/help\/5002744<\/a><\/li>\n<li>Install the <strong>security update<\/strong> for the vulnerability<br \/>\nSP2019: <a href=\"https:\/\/www.microsoft.com\/en-us\/download\/details.aspx?id=108286\" data-ogsc=\"\" data-outlook-id=\"a5b92f5b-bb40-433f-bcd6-b897e128388e\">https:\/\/www.microsoft.com\/en-us\/download\/details.aspx?id=108286<\/a><br \/>\nSP2016: <a href=\"https:\/\/www.microsoft.com\/en-us\/download\/details.aspx?id=108288\" data-ogsc=\"\" data-outlook-id=\"5d9f0eca-163e-46eb-b7e2-2cb726930e28\">https:\/\/www.microsoft.com\/en-us\/download\/details.aspx?id=108288<\/a><\/li>\n<li>Configure <strong>\u2018Antimalware Scan Interface (AMSI)\u2019<\/strong> integration in SharePoint as indicated in the article.<br \/>\n<strong><span data-ogsc=\"red\">Note<\/span><\/strong>: <u>not all SharePoint versions support this<\/u> (option unavailable); in this case, it&#8217;s important to install the patches and follow <u>step 5 below<\/u>.<\/li>\n<li>Make <strong>Microsoft Defender for Endpoint<\/strong> available as indicated in the article.<br \/>\n<strong><span data-ogsc=\"red\">Note<\/span><\/strong>: This is a <u>paid service within the Azure Tenant<\/u> and may not be available to you. In this case, it&#8217;s important to install the patches and follow <u>step 5 below<\/u>.<\/li>\n<li>Rotate SharePoint Server <strong>ASP.NET machine keys<\/strong> as indicated in the article.<br \/>\n<strong><span data-ogsc=\"red\">Note:<\/span><\/strong> <u>The patches must be installed first.<\/u> After updating the machine keys, perform an <u>IISRESET on all SharePoint servers<\/u>.<br \/>\nThe &#8220;web application&#8221; name is often &#8220;MIM Portal.&#8221; If you&#8217;re unsure, look up the web application for MIM Portal in SharePoint Central Admin.<br \/>\nThe command is <span data-ogsc=\"black\" data-ogsb=\"yellow\">\u2018Update-SPMachineKey -WebApplication \u201cMIM Portal\u201d<\/span>\u2019 and should be run with a &#8220;Farm Admin&#8221; account in SharePoint (we introduced the &#8220;MIM Installer&#8221; account for this purpose, which is &#8220;Farm Admin&#8221;).<\/li>\n<\/ol>\n<p>If you would like assistance with the implementation of the above, please contact us via<br \/> <a href=\"mailto:info@trusted-id.eu\" data-ogsc=\"\" data-outlook-id=\"71c294f4-653c-402c-88be-e2f6db919565\">info@trusted-id.eu<\/a><\/p>\n\t\t\t<\/div>\n\t\t\t<div class=\"col-md-2\">\n\t\t\t\t\n\t\t\t<\/div>\n\t<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>If you use Microsoft Identity Manager 2016, including the Portal, and SharePoint, it&#8217;s useful to know that there&#8217;s a vulnerability in SharePoint 2019 and SharePoint 2016 that&#8217;s currently being actively exploited and is being warned about.  <\/p>\n","protected":false},"featured_media":2111,"template":"","meta":{"_acf_changed":false,"footnotes":""},"categories":[],"class_list":["post-2265","nieuws","type-nieuws","status-publish","has-post-thumbnail","hentry"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Vulnerability in SharePoint 2019\/SharePoint 2016 - Trusted ID<\/title>\n<meta name=\"description\" content=\"If you use Microsoft Identity Manager 2016, including the Portal, and SharePoint, it&#039;s useful to know that there&#039;s a vulnerability in SharePoint 2019 and SharePoint 2016 that&#039;s currently being actively exploited and is being warned about.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.trusted-id.eu\/en\/nieuws\/vulnerability-in-sharepoint-2019-sharepoint-2016\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Vulnerability in SharePoint 2019\/SharePoint 2016 - Trusted ID\" \/>\n<meta property=\"og:description\" content=\"If you use Microsoft Identity Manager 2016, including the Portal, and SharePoint, it&#039;s useful to know that there&#039;s a vulnerability in SharePoint 2019 and SharePoint 2016 that&#039;s currently being actively exploited and is being warned about.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.trusted-id.eu\/en\/nieuws\/vulnerability-in-sharepoint-2019-sharepoint-2016\/\" \/>\n<meta property=\"og:site_name\" content=\"Trusted ID\" \/>\n<meta property=\"article:modified_time\" content=\"2026-01-26T16:06:31+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.trusted-id.eu\/wp-content\/uploads\/2025\/07\/512px-Microsoft_Office_SharePoint_2019\u2013present.svg_.png\" \/>\n\t<meta property=\"og:image:width\" content=\"512\" \/>\n\t<meta property=\"og:image:height\" content=\"501\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.trusted-id.eu\\\/en\\\/nieuws\\\/vulnerability-in-sharepoint-2019-sharepoint-2016\\\/\",\"url\":\"https:\\\/\\\/www.trusted-id.eu\\\/en\\\/nieuws\\\/vulnerability-in-sharepoint-2019-sharepoint-2016\\\/\",\"name\":\"Vulnerability in SharePoint 2019\\\/SharePoint 2016 - Trusted ID\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.trusted-id.eu\\\/en\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.trusted-id.eu\\\/en\\\/nieuws\\\/vulnerability-in-sharepoint-2019-sharepoint-2016\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.trusted-id.eu\\\/en\\\/nieuws\\\/vulnerability-in-sharepoint-2019-sharepoint-2016\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.trusted-id.eu\\\/wp-content\\\/uploads\\\/2025\\\/07\\\/512px-Microsoft_Office_SharePoint_2019\u2013present.svg_.png\",\"datePublished\":\"2025-07-23T15:30:27+00:00\",\"dateModified\":\"2026-01-26T16:06:31+00:00\",\"description\":\"If you use Microsoft Identity Manager 2016, including the Portal, and SharePoint, it's useful to know that there's a vulnerability in SharePoint 2019 and SharePoint 2016 that's currently being actively exploited and is being warned about.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.trusted-id.eu\\\/en\\\/nieuws\\\/vulnerability-in-sharepoint-2019-sharepoint-2016\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.trusted-id.eu\\\/en\\\/nieuws\\\/vulnerability-in-sharepoint-2019-sharepoint-2016\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.trusted-id.eu\\\/en\\\/nieuws\\\/vulnerability-in-sharepoint-2019-sharepoint-2016\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.trusted-id.eu\\\/wp-content\\\/uploads\\\/2025\\\/07\\\/512px-Microsoft_Office_SharePoint_2019\u2013present.svg_.png\",\"contentUrl\":\"https:\\\/\\\/www.trusted-id.eu\\\/wp-content\\\/uploads\\\/2025\\\/07\\\/512px-Microsoft_Office_SharePoint_2019\u2013present.svg_.png\",\"width\":512,\"height\":501},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.trusted-id.eu\\\/en\\\/nieuws\\\/vulnerability-in-sharepoint-2019-sharepoint-2016\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.trusted-id.eu\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Vulnerability in SharePoint 2019\\\/SharePoint 2016\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.trusted-id.eu\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/www.trusted-id.eu\\\/en\\\/\",\"name\":\"Trusted ID\",\"description\":\"Identity &amp; Acces management\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.trusted-id.eu\\\/en\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.trusted-id.eu\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.trusted-id.eu\\\/en\\\/#organization\",\"name\":\"Trusted ID\",\"url\":\"https:\\\/\\\/www.trusted-id.eu\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.trusted-id.eu\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.trusted-id.eu\\\/wp-content\\\/uploads\\\/2025\\\/10\\\/Trusted-ID-Website-logo-636x107-1.png\",\"contentUrl\":\"https:\\\/\\\/www.trusted-id.eu\\\/wp-content\\\/uploads\\\/2025\\\/10\\\/Trusted-ID-Website-logo-636x107-1.png\",\"width\":636,\"height\":107,\"caption\":\"Trusted ID\"},\"image\":{\"@id\":\"https:\\\/\\\/www.trusted-id.eu\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Vulnerability in SharePoint 2019\/SharePoint 2016 - Trusted ID","description":"If you use Microsoft Identity Manager 2016, including the Portal, and SharePoint, it's useful to know that there's a vulnerability in SharePoint 2019 and SharePoint 2016 that's currently being actively exploited and is being warned about.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.trusted-id.eu\/en\/nieuws\/vulnerability-in-sharepoint-2019-sharepoint-2016\/","og_locale":"en_US","og_type":"article","og_title":"Vulnerability in SharePoint 2019\/SharePoint 2016 - Trusted ID","og_description":"If you use Microsoft Identity Manager 2016, including the Portal, and SharePoint, it's useful to know that there's a vulnerability in SharePoint 2019 and SharePoint 2016 that's currently being actively exploited and is being warned about.","og_url":"https:\/\/www.trusted-id.eu\/en\/nieuws\/vulnerability-in-sharepoint-2019-sharepoint-2016\/","og_site_name":"Trusted ID","article_modified_time":"2026-01-26T16:06:31+00:00","og_image":[{"width":512,"height":501,"url":"https:\/\/www.trusted-id.eu\/wp-content\/uploads\/2025\/07\/512px-Microsoft_Office_SharePoint_2019\u2013present.svg_.png","type":"image\/png"}],"twitter_card":"summary_large_image","schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.trusted-id.eu\/en\/nieuws\/vulnerability-in-sharepoint-2019-sharepoint-2016\/","url":"https:\/\/www.trusted-id.eu\/en\/nieuws\/vulnerability-in-sharepoint-2019-sharepoint-2016\/","name":"Vulnerability in SharePoint 2019\/SharePoint 2016 - Trusted ID","isPartOf":{"@id":"https:\/\/www.trusted-id.eu\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.trusted-id.eu\/en\/nieuws\/vulnerability-in-sharepoint-2019-sharepoint-2016\/#primaryimage"},"image":{"@id":"https:\/\/www.trusted-id.eu\/en\/nieuws\/vulnerability-in-sharepoint-2019-sharepoint-2016\/#primaryimage"},"thumbnailUrl":"https:\/\/www.trusted-id.eu\/wp-content\/uploads\/2025\/07\/512px-Microsoft_Office_SharePoint_2019\u2013present.svg_.png","datePublished":"2025-07-23T15:30:27+00:00","dateModified":"2026-01-26T16:06:31+00:00","description":"If you use Microsoft Identity Manager 2016, including the Portal, and SharePoint, it's useful to know that there's a vulnerability in SharePoint 2019 and SharePoint 2016 that's currently being actively exploited and is being warned about.","breadcrumb":{"@id":"https:\/\/www.trusted-id.eu\/en\/nieuws\/vulnerability-in-sharepoint-2019-sharepoint-2016\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.trusted-id.eu\/en\/nieuws\/vulnerability-in-sharepoint-2019-sharepoint-2016\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.trusted-id.eu\/en\/nieuws\/vulnerability-in-sharepoint-2019-sharepoint-2016\/#primaryimage","url":"https:\/\/www.trusted-id.eu\/wp-content\/uploads\/2025\/07\/512px-Microsoft_Office_SharePoint_2019\u2013present.svg_.png","contentUrl":"https:\/\/www.trusted-id.eu\/wp-content\/uploads\/2025\/07\/512px-Microsoft_Office_SharePoint_2019\u2013present.svg_.png","width":512,"height":501},{"@type":"BreadcrumbList","@id":"https:\/\/www.trusted-id.eu\/en\/nieuws\/vulnerability-in-sharepoint-2019-sharepoint-2016\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.trusted-id.eu\/en\/"},{"@type":"ListItem","position":2,"name":"Vulnerability in SharePoint 2019\/SharePoint 2016"}]},{"@type":"WebSite","@id":"https:\/\/www.trusted-id.eu\/en\/#website","url":"https:\/\/www.trusted-id.eu\/en\/","name":"Trusted ID","description":"Identity &amp; Acces management","publisher":{"@id":"https:\/\/www.trusted-id.eu\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.trusted-id.eu\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.trusted-id.eu\/en\/#organization","name":"Trusted ID","url":"https:\/\/www.trusted-id.eu\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.trusted-id.eu\/en\/#\/schema\/logo\/image\/","url":"https:\/\/www.trusted-id.eu\/wp-content\/uploads\/2025\/10\/Trusted-ID-Website-logo-636x107-1.png","contentUrl":"https:\/\/www.trusted-id.eu\/wp-content\/uploads\/2025\/10\/Trusted-ID-Website-logo-636x107-1.png","width":636,"height":107,"caption":"Trusted ID"},"image":{"@id":"https:\/\/www.trusted-id.eu\/en\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/www.trusted-id.eu\/en\/wp-json\/wp\/v2\/nieuws\/2265","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.trusted-id.eu\/en\/wp-json\/wp\/v2\/nieuws"}],"about":[{"href":"https:\/\/www.trusted-id.eu\/en\/wp-json\/wp\/v2\/types\/nieuws"}],"version-history":[{"count":5,"href":"https:\/\/www.trusted-id.eu\/en\/wp-json\/wp\/v2\/nieuws\/2265\/revisions"}],"predecessor-version":[{"id":2376,"href":"https:\/\/www.trusted-id.eu\/en\/wp-json\/wp\/v2\/nieuws\/2265\/revisions\/2376"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.trusted-id.eu\/en\/wp-json\/wp\/v2\/media\/2111"}],"wp:attachment":[{"href":"https:\/\/www.trusted-id.eu\/en\/wp-json\/wp\/v2\/media?parent=2265"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.trusted-id.eu\/en\/wp-json\/wp\/v2\/categories?post=2265"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}