HIGH
Microsoft SharePoint Server Remote Code Execution Vulnerability
Published Sep 13, 2022
8.8
HIGHCVSS 3.1
EPSS 2.14%
Description
Microsoft SharePoint Server Remote Code Execution Vulnerability
Affected products
-
- Version 15.0.0StatusaffectedConstraints<15.0.5485.1000
- Version
-
- Version 16.0.0StatusaffectedConstraints<16.0.5361.1002
- Version
-
- Version 15.0.0StatusaffectedConstraints<15.0.5485.1000
- Version
-
- Version 16.0.0StatusaffectedConstraints<16.0.10390.20000
- Version
-
- Version 16.0.0StatusaffectedConstraints<16.0.15601.20052
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Microsoft | Microsoft SharePoint Enterprise Server 2013 Service Pack 1 | n/a |
| ||||||
| Microsoft | Microsoft SharePoint Enterprise Server 2016 | n/a |
| ||||||
| Microsoft | Microsoft SharePoint Foundation 2013 Service Pack 1 | n/a |
| ||||||
| Microsoft | Microsoft SharePoint Server 2019 | n/a |
| ||||||
| Microsoft | Microsoft SharePoint Server Subscription Edition | n/a |
|
OR
- 2013
- 2016
- 2013
- n/a
- 2019
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (0)
No CWE recorded.
References (2)
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-40616 Advisory
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-38009 vendor-advisory
| Link | Providers | Tags |
|---|---|---|
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-40616 | Advisory | |
| https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-38009 | vendor-advisory |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner microsoft
Published Sep 13, 2022
Updated Mar 11, 2025
Reserved Aug 8, 2022
Link CVE-2022-38009
CISA Vulnrichment
Updated n/a
ENISA EUVD
EUVD-2022-40616 Assigner microsoft
Published Sep 13, 2022
Updated Mar 11, 2025
Exploited since n/a
Link EUVD-2022-40616