CVE-2022-22005 — Vulnetix

CVE-2022-22005 PUBLISHED CVSS 8.800000190734863 HIGH

De multiples vulnérabilités ont été corrigées dans <span class="textit">Microsoft Office</span>. Elles permettent à un attaquant de provoquer une usurpation d'identité, une atteinte à la confidentialité des données, un contournement de la fonctionnalité de sécurité et une exécution de code à distance.

EPSS 5.38% · 90.3th percentile

Risk Scores

CVSS 3.1

8.800000190734863

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

EPSS Score

5.38%

90.3th percentile

Affected Products

Vendor	Product	Versions
microsoft	sharepoint_server	16.0.0, 15.0.0, 2019
Microsoft	Microsoft SharePoint Enterprise Server 2013 Service Pack 1	15.0.0
Microsoft	Office
Microsoft	Microsoft SharePoint Server Subscription Edition	16.0.0
Microsoft	Microsoft SharePoint Enterprise Server 2016	16.0.0
microsoft	sharepoint_foundation	2013
microsoft	sharepoint_enterprise_server	2016
Microsoft	Microsoft SharePoint Server 2019	16.0.0

Exploit Intelligence

https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1 (msrc)
CIRCL seen: CVE-2022-22005 (circl-sighting)
Microsoft SharePoint Server Remote Code Execution Vulnerability (circl)
rules.yar (github-yara)
rules.yar (github-yara)
rules.yar (github-yara)
rules.yar (github-yara)

Timeline

Feb 8, 2022 CVE Published
Feb 9, 2022 PoC Published
Feb 10, 2022 EPSS Score
Apr 3, 2022 EPSS Score
May 26, 2022 EPSS Score
Sep 9, 2022 EPSS Score
Dec 22, 2022 EPSS Score
Feb 13, 2023 EPSS Score
Mar 14, 2023 EPSS Score
May 8, 2023 EPSS Score
May 28, 2023 EPSS Score
Jun 29, 2023 EPSS Score

References

Open in Interactive Console →