8.8High

CVE-2023-21717Microsoft SharePoint Server Elevation of Privilege Vulnerability

Microsoft Microsoft SharePoint Enterprise Server 2013 Service Pack 1; Microsoft Microsoft SharePoint Enterprise Server 2016; Microsoft Microsoft SharePoint Fou… Published: (3 years ago)

Description

Microsoft SharePoint Server Elevation of Privilege Vulnerability

Weakness (CWE): CWE-284

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
Microsoft Microsoft SharePoint Enterprise Server 2013 Service Pack 1 15.0.0 – < 15.0.5529.1000
Microsoft Microsoft SharePoint Enterprise Server 2016 16.0.0 – < 16.0.5383.1000
Microsoft Microsoft SharePoint Foundation 2013 Service Pack 1 15.0.0 – < 15.0.5529.1000
Microsoft Microsoft SharePoint Server 2019 16.0.0 – < 16.0.10395.20001
Microsoft Microsoft SharePoint Server Subscription Edition 16.0.0 – < 16.0.15601.20478
microsoft sharepoint foundation 15.0.0 – < 15.0.5529.1000
microsoft sharepoint server 16.0.0 – < 16.0.5383.1000

References and patches