CVE-2022-41122HighCVSS 6.5

Microsoft SharePoint Server Spoofing Vulnerability

Published
November 8, 2022
Last Modified
—

🔗 CVE IDs covered (1)

CVE-2022-41122 →

📋 Description

According to the CVSS metric, privileges required is low (PR:L). What does that mean for this vulnerability? The attacker must be authenticated and possess the permissions for page creation to be able to exploit this vulnerability.

What type of information could be disclosed by this vulnerability? The type of information that could be disclosed if an attacker successfully exploited this vulnerability is sensitive information.

🎯 Affected products5

  • Microsoft SharePoint Enterprise Server 2013 Service Pack 1
  • Microsoft SharePoint Enterprise Server 2016
  • Microsoft SharePoint Foundation 2013 Service Pack 1
  • Microsoft SharePoint Server 2019
  • Microsoft SharePoint Server Subscription Edition

✅ Remediation

KB5002269 (Security Update) — fixed build 16.0.5361.1002 KB5002264 (Cumulative Update) — fixed build 15.0.5485.1000 KB5002267 (Security Update) — fixed build 15.0.5485.1000 KB5002258 (Security Update) — fixed build 16.0.10390.20000 KB5002271 (Security Update) — fixed build 16.0.15601.20052

🔗 References (15)