CVE-2022-30157
Published: 15 June 2022
Summary
CVE-2022-30157 is a high-severity an unspecified weakness vulnerability in Microsoft Sharepoint Server. Its CVSS base score is 8.8 (High).
Operationally, ranked in the top 5.0% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
Microsoft SharePoint Server contains a remote code execution vulnerability tracked as CVE-2022-30157. The flaw received a CVSS 3.1 score of 8.8 reflecting network attack vector, low attack complexity, low required privileges, and no user interaction, with high impact on confidentiality, integrity, and availability.
An authenticated attacker with low privileges can send specially crafted requests over the network to execute arbitrary code on the SharePoint Server, potentially gaining full control of the affected system.
Microsoft security advisories for CVE-2022-30157 are published at msrc.microsoft.com and provide official guidance on available updates and mitigation measures. The associated EPSS score has remained flat at 0.1621 with no material increase observed after disclosure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2022-35365
Vulnerability details
Microsoft SharePoint Server Remote Code Execution Vulnerability
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.