What is CVE-2022-21837?

CVE-2022-21837 is a security advisory published by Microsoft Security Response Center (MSRC) with High severity. Microsoft SharePoint Server Remote Code Execution Vulnerability

Which CVE IDs does CVE-2022-21837 cover?

CVE-2022-21837 covers the following CVE IDs: CVE-2022-21837. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of CVE-2022-21837?

CVE-2022-21837 has a CVSS v3 base score of 8.3, published by Microsoft Security Response Center (MSRC).

Which products are affected by CVE-2022-21837?

CVE-2022-21837 affects 4 products, including: Microsoft SharePoint Enterprise Server 2016; Microsoft SharePoint Foundation 2013 Service Pack 1; Microsoft SharePoint Server 2019; Microsoft SharePoint Server Subscription Edition.

CVE-2022-21837HighCVSS 8.3

Microsoft SharePoint Server Remote Code Execution Vulnerability

Vendor

Microsoft Security Response Center (MSRC)

Published

January 11, 2022

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2022-21837 →

📋 Description

How could an attacker exploit the vulnerability? An authenticated attacker with access to the domain could perform remote code execution on the SharePoint server to elevate themselves to SharePoint admin.

🎯 Affected products4

Microsoft SharePoint Enterprise Server 2016
Microsoft SharePoint Foundation 2013 Service Pack 1
Microsoft SharePoint Server 2019
Microsoft SharePoint Server Subscription Edition

✅ Remediation

KB5002113 (Security Update) — fixed build 16.0.5266.1000 KB5002109 (Security Update) — fixed build 16.0.10382.20004 KB5002111 (Security Update) — fixed build 16.0.14326.20714 KB5002127 (Security Update) — fixed build 15.0.5415.1000

🔗 References (9)

advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21837
patchhttps://www.microsoft.com/download/details.aspx?familyid=d6f3bfae-cb60-47b6-8c1a-d60c96c3f24a
referencehttps://support.microsoft.com/help/5002113
patchhttps://www.microsoft.com/download/details.aspx?familyid=b5de2562-9f1d-476e-927c-4b440ba163b3
referencehttps://support.microsoft.com/help/5002109
patchhttps://www.microsoft.com/download/details.aspx?familyid=91a76e44-a6bc-48a2-8a3e-ae22d6260806
referencehttps://support.microsoft.com/help/5002111
patchhttps://www.microsoft.com/download/details.aspx?familyid=a7de2a7b-35b0-42d3-9a12-09cbd1f6e79b
referencehttps://support.microsoft.com/help/5002127