High · 8.8 CVE-2022-38008 EUVD-2022-40615GHSA-xgh6-7v4c-vr2f

Microsoft SharePoint Server Remote Code Execution Vulnerability

Published Sep 13, 2022 · Updated Mar 11, 2025 · Assigned by microsoft

Vendor: Microsoft Product: Microsoft SharePoint Enterprise Server 2013 Service Pack 1 Product: Microsoft SharePoint Enterprise Server 2016 Product: Microsoft SharePoint Foundation 2013 Service Pack 1 Product: Microsoft SharePoint Server 2019 Product: Microsoft SharePoint Server Subscription Edition Product: SharePoint Server Subscription Edition Language Pack

Description

Microsoft SharePoint Server Remote Code Execution Vulnerability

Affected products

Vendor	Product	Affected	Fixed
Microsoft	Microsoft SharePoint Enterprise Server 2016	16.0.0 – < 16.0.5361.1002	16.0.5361.1002
Microsoft	Microsoft SharePoint Enterprise Server 2013 Service Pack 1	15.0.0 – < 15.0.5485.1000	15.0.5485.1000
Microsoft	Microsoft SharePoint Server 2019	16.0.0 – < 16.0.10390.20000	16.0.10390.20000
Microsoft	Microsoft SharePoint Server Subscription Edition	16.0.0 – < 16.0.15601.20052	16.0.15601.20052
Microsoft	SharePoint Server Subscription Edition Language Pack	16.0.0 – < 16.0.15601.20052	16.0.15601.20052
Microsoft	Microsoft SharePoint Foundation 2013 Service Pack 1	15.0.0 – < 15.0.5485.1000	15.0.5485.1000

Advisories 1

MSRC-CVE-2022-38008 Microsoft SharePoint Server Remote Code Execution Vulnerability Microsoft Security Response Center · Sep 13, 2022

References

Microsoft SharePoint Server Remote Code Execution Vulnerability vendor-advisory