Over the past weekend, SharePoint Server was back in the news! 0-Day vulnerabilty was exploited, some servers were compromised, and Microsoft was scrambling to get the patches out. It was CVE-2025-53770 and a few related vulnerabilities that stirred up the quiet world of SharePoint on-prem. While it was refreshing to see that SharePoint Server is very much alive despite the focus on cloud-based SharePoint Online, the entire affair has underscored that Microsoft doesn’t spend resources on SharePoint Server maintenance as much as before.

As expected, the SharePoint SE patch was released first, followed by patches for SharePoint 2019 and 2016. However, it soon became apparent that the patch caused issues with UI elements on modern pages in SharePoint 2019. It took Microsoft a few more hours to release additional patch for SP2019, and then, finally, SP2016 patches were released too. I don’t want to get into more details (get them on Microsoft’s customer guidance page), because this post is about something that not been clearly documented by Microsoft: the impact on Business Connectivity Services (BCS) with .NET connectors.

SharePoint Server patching is one of the regular maintenance tasks SharePoint admins are concerned with. How regular? Ideally - monthly, but we don’t live in ideal world. If SharePoint farm has not been patched for a couple of months or couple of years, it’s no big deal - just install the latest Cumulative Update and have all fixes in place, right? Wrong!

Ok, just installed January 2018 CU on SharePoint 2013 farm which was not patched since SP1 before that. It seems the bug from one of the security updates introduced in March 2015 is still there and ruins InfoPath forms. There is a blog with a solution for that (thanks Kate). Looks like no one reported this to MS since this was not fixed, and now it’s probably too late. I’ll repost the solution here in case the source will go down, looks like it was not updated for a while… After installing the Security Update for Microsoft SharePoint 2013 ( KB2881078 ), we realized that the InfoPath forms stopped working.

Hi Everyone,

Exciting news here - ProSharePoint.ru is now Brave Verified Publisher. I even got a shiny referral badge. So if you want to have some privacy and much less annoying ads on the web (and not necessarily by blocking them) you ought to try Brave browser!

Disclaimer: I’m not receiving any compensation for this post. But I will get about 5 USD worth of BAT tokens for everyone who will use my referral link and do the right thing switching to Brave and using it at least for 30 days.