Severity
High
Analysis Summary
CVE-2022-44690 CVSS:8.8
Microsoft SharePoint Server could allow a remote authenticated attacker to execute arbitrary code on the system. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary code on the SharePoint Server.
CVE-2022-44693 CVSS:8.8
Microsoft SharePoint Server could allow a remote authenticated attacker to execute arbitrary code on the system. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary code on the SharePoint Server.
Impact
Code Execution
Indicators Of Compromise
CVE
- CVE-2022-42475
Affected Vendors
Microsoft
Affected Products
- Microsoft SharePoint Foundation 2013 SP1
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- Microsoft SharePoint Server Subscription Edition Language Pack
Remediation
Use Microsoft Automatic Update to apply the appropriate patch for your system, or the Microsoft Security Update Guide to search for available patches.