Microsoft SharePoint Server Security Feature Bypass Vulnerability
CVE-2022-21968

4.3MEDIUM

Key Information:

Vendor: Microsoft
Status: Microsoft Sharepoint Enterprise Server 2016; Microsoft Sharepoint Server 2019; Microsoft Sharepoint Server Subscription Edition; Microsoft Sharepoint Foundation 2013 Service Pack 1
Vendor: CVE Published:; 9 February 2022

What is CVE-2022-21968?

Microsoft SharePoint Server Security Feature Bypass Vulnerability

Microsoft SharePoint Enterprise Server 2016 x64-based Systems 16.0.0 < 16.0.5278.1000

Microsoft SharePoint Foundation 2013 Service Pack 1 x64-based Systems 15.0.0 < 15.0.5423.1000

Microsoft SharePoint Server 2019 x64-based Systems 16.0.0 < 16.0.10383.20001

Score:

4.3

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

None

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet