CVE-2022-29108

CVSS 3.1 Score 8.8 of 10 (high)

Details

Published May 10, 2022
Updated: Jan 2, 2025

Summary

CVE-2022-29108 is a remote code execution vulnerability affecting Microsoft SharePoint Servers. Maliciously crafted SharePoint documents can exploit this issue, allowing attackers to execute arbitrary code in the context of the SharePoint application pool identity. Successful exploitation could result in unauthorized access, data theft, or server compromise. Microsoft recommends users install the available patch to mitigate the risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Microsoft SharePoint Foundation
  • Microsoft SharePoint Server
  • Microsoft Sharepoint Enterprise Server

Affected Vendors

  • Microsoft

Advisories, Assessments, and Mitigations