What is CVE-2021-42294?

CVE-2021-42294 is a security advisory published by Microsoft Security Response Center (MSRC) with High severity. Microsoft SharePoint Server Remote Code Execution Vulnerability

Which CVE IDs does CVE-2021-42294 cover?

CVE-2021-42294 covers the following CVE IDs: CVE-2021-42294. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of CVE-2021-42294?

CVE-2021-42294 has a CVSS v3 base score of 7.2, published by Microsoft Security Response Center (MSRC).

Which products are affected by CVE-2021-42294?

CVE-2021-42294 affects 6 products, including: Microsoft SharePoint Enterprise Server 2013 Service Pack 1; Microsoft SharePoint Enterprise Server 2016; Microsoft SharePoint Foundation 2013 Service Pack 1; Microsoft SharePoint Server 2019; Microsoft SharePoint Server Subscription Edition; and others — see the full list on the advisory page.

CVE-2021-42294HighCVSS 7.2

Microsoft SharePoint Server Remote Code Execution Vulnerability

Vendor

Microsoft Security Response Center (MSRC)

Published

December 14, 2021

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2021-42294 →

📋 Description

There are multiple update packages available for some of the affected software. Do I need to install all the updates listed in the Security Updates table for the software? Yes. Customers should apply all updates offered for the software installed on their systems. If multiple updates apply, they can be installed in any order.

🎯 Affected products6

Microsoft SharePoint Enterprise Server 2013 Service Pack 1
Microsoft SharePoint Enterprise Server 2016
Microsoft SharePoint Foundation 2013 Service Pack 1
Microsoft SharePoint Server 2019
Microsoft SharePoint Server Subscription Edition
SharePoint Server Subscription Edition Language Pack

✅ Remediation

KB5002055 (Security Update) — fixed build 16.0.5254.1000 KB5002059 (Security Update) — fixed build 16.0.5254.1000 KB5002008 (Security Update) — fixed build 15.0.5407.1000 KB5002054 (Security Update) — fixed build 16.0.10381.20001 KB5002061 (Security Update) — fixed build 16.0.10381.20001 KB5002045 (Security Update) — fixed build 16.0.14326.20620 KB5002047 (Security Update) — fixed build 16.0.14326.20620 KB5002071 (Security Update) — fixed build 15.0.5407.1000 KB5002015 (Security Update) — fixed build 15.0.5407.1000

🔗 CVE IDs covered (1)

📋 Description

🎯 Affected products6

✅ Remediation

🔗 References (10)