CVE-2021-42294

HIGH7.2

JSON export Create alert

Description

Microsoft SharePoint Server Remote Code Execution Vulnerability

CVSS breakdown

CVSS 3.1

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

E

Unchanged

RL

O

RC

Changed

Affected products

Microsoft / sharepoint_foundation2013 – 2013
Microsoft / sharepoint_server2016 – 2016
Microsoft / sharepoint_server2013 – 2013
Microsoft / sharepoint_server2019 – 2019
Microsoft / sharepoint_server
Microsoft / sharepoint_server

References

VENDOR_ADVISORYhttps://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-42294