CVE-2022-30171 - Microsoft Office Information Disclosure Vulnerability

MEDIUM

Microsoft Office Information Disclosure Vulnerability

Published Jun 15, 2022

5.5

MEDIUM

CVSS 3.1

EPSS 2.56%

Microsoft Office Information Disclosure Vulnerability

Vendor Microsoft Product Microsoft Office Online Server Default
unknown
Affected
- ≥ 16.0.1, < 16.0.14931.20612
Vendor Microsoft Product Microsoft Office Web Apps Server 2013 Service Pack 1 Default
unknown
Affected
- ≥ 15.0.1, < 15.0.5459.1001
Vendor Microsoft Product Microsoft SharePoint Enterprise Server 2013 Service Pack 1 Default
unknown
Affected
- ≥ 15.0.0, < 15.0.5459.1001
Vendor Microsoft Product Microsoft SharePoint Enterprise Server 2016 Default
unknown
Affected
- ≥ 16.0.0, < 16.0.5332.1001
Vendor Microsoft Product Microsoft SharePoint Server 2019 Default
unknown
Affected
- ≥ 16.0.0, < 16.0.10387.20008
Vendor Microsoft Product Microsoft SharePoint Server Subscription Edition Default
unknown
Affected
- ≥ 16.0.0, < 16.0.14931.20418

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Microsoft	Microsoft Office Online Server	unknown	Affected ≥ 16.0.1, < 16.0.14931.20612
Microsoft	Microsoft Office Web Apps Server 2013 Service Pack 1	unknown	Affected ≥ 15.0.1, < 15.0.5459.1001
Microsoft	Microsoft SharePoint Enterprise Server 2013 Service Pack 1	unknown	Affected ≥ 15.0.0, < 15.0.5459.1001
Microsoft	Microsoft SharePoint Enterprise Server 2016	unknown	Affected ≥ 16.0.0, < 16.0.5332.1001
Microsoft	Microsoft SharePoint Server 2019	unknown	Affected ≥ 16.0.0, < 16.0.10387.20008
Microsoft	Microsoft SharePoint Server Subscription Edition	unknown	Affected ≥ 16.0.0, < 16.0.14931.20418

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-35379		Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30171		vendor-advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-30171		PatchVendor Advisory

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner microsoft

Published Jun 15, 2022

Updated Jan 2, 2025

Reserved May 3, 2022

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Red Hat

No data

ENISA EUVD

Assigner microsoft

Published Jun 15, 2022

Updated Jan 2, 2025

GitHub

No data