{"id":"CVE-2021-42294","state":"PUBLISHED","title":"Microsoft SharePoint Server Remote Code Execution Vulnerability","description":"Microsoft SharePoint Server Remote Code Execution Vulnerability","publishedAt":"2021-12-15T14:14:54.000Z","updatedAt":"2024-08-04T03:30:37.737Z","severity":{"score":7.2,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","source":"microsoft"},"assigner":"microsoft","products":["Microsoft Microsoft SharePoint Enterprise Server 2016","Microsoft Microsoft SharePoint Enterprise Server 2013 Service Pack 1","Microsoft Microsoft SharePoint Server 2019","Microsoft Microsoft SharePoint Server Subscription Edition","Microsoft SharePoint Server Subscription Edition Language Pack","Microsoft Microsoft SharePoint Foundation 2013 Service Pack 1"],"affected":[{"vendor":"Microsoft","product":"Microsoft SharePoint Enterprise Server 2016","versions":[{"version":"16.0.0","status":"affected","lessThan":"16.0.5254.1000","versionType":"custom"}],"cpes":["cpe:2.3:a:microsoft:sharepoint_server:2016:*:*:*:enterprise:*:*:*"],"platforms":["x64-based Systems"]},{"vendor":"Microsoft","product":"Microsoft SharePoint Enterprise Server 2013 Service Pack 1","versions":[{"version":"15.0.0","status":"affected","lessThan":"15.0.5407.1000","versionType":"custom"}],"cpes":["cpe:2.3:a:microsoft:sharepoint_server:2013:sp1:*:*:enterprise:*:*:*"],"platforms":["x64-based Systems"]},{"vendor":"Microsoft","product":"Microsoft SharePoint Server 2019","versions":[{"version":"16.0.0","status":"affected","lessThan":"16.0.10381.20001","versionType":"custom"}],"cpes":["cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*"],"platforms":["x64-based Systems"]},{"vendor":"Microsoft","product":"Microsoft SharePoint Server Subscription Edition","versions":[{"version":"16.0.0","status":"affected","lessThan":"16.0.14326.20620","versionType":"custom"}],"cpes":["cpe:2.3:a:microsoft:sharepoint_server:-:*:*:*:subscription:*:*:*"],"platforms":["x64-based Systems"]},{"vendor":"Microsoft","product":"SharePoint Server Subscription Edition Language Pack","versions":[{"version":"16.0.0","status":"affected","lessThan":"16.0.14326.20620","versionType":"custom"}],"cpes":["cpe:2.3:a:microsoft:sharepoint_server:-:language_pack:*:*:subscription:*:*:*"],"platforms":["x64-based Systems"]},{"vendor":"Microsoft","product":"Microsoft SharePoint Foundation 2013 Service Pack 1","versions":[{"version":"15.0.0","status":"affected","lessThan":"15.0.5407.1000","versionType":"custom"}],"cpes":["cpe:2.3:a:microsoft:sharepoint_foundation:2013:sp1:*:*:*:*:*:*"],"platforms":["x64-based Systems"]}],"references":["https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-42294"],"weaknesses":[],"ingestedAt":"2026-10-29T19:49:04.473Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2021/42xxx/CVE-2021-42294.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2021-42294","state":"PUBLISHED","datePublished":"2021-12-15T14:14:54.000Z","dateUpdated":"2024-08-04T03:30:37.737Z","assignerShortName":"microsoft","assignerOrgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","dateReserved":"2021-10-12T00:00:00.000Z"},"containers":{"cna":{"title":"Microsoft SharePoint Server Remote Code Execution Vulnerability","descriptions":[{"lang":"en-US","value":"Microsoft SharePoint Server Remote Code Execution Vulnerability"}],"affected":[{"vendor":"Microsoft","product":"Microsoft SharePoint Enterprise Server 2016","versions":[{"version":"16.0.0","status":"affected","lessThan":"16.0.5254.1000","versionType":"custom"}],"cpes":["cpe:2.3:a:microsoft:sharepoint_server:2016:*:*:*:enterprise:*:*:*"],"platforms":["x64-based Systems"]},{"vendor":"Microsoft","product":"Microsoft SharePoint Enterprise Server 2013 Service Pack 1","versions":[{"version":"15.0.0","status":"affected","lessThan":"15.0.5407.1000","versionType":"custom"}],"cpes":["cpe:2.3:a:microsoft:sharepoint_server:2013:sp1:*:*:enterprise:*:*:*"],"platforms":["x64-based Systems"]},{"vendor":"Microsoft","product":"Microsoft SharePoint Server 2019","versions":[{"version":"16.0.0","status":"affected","lessThan":"16.0.10381.20001","versionType":"custom"}],"cpes":["cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*"],"platforms":["x64-based Systems"]},{"vendor":"Microsoft","product":"Microsoft SharePoint Server Subscription Edition","versions":[{"version":"16.0.0","status":"affected","lessThan":"16.0.14326.20620","versionType":"custom"}],"cpes":["cpe:2.3:a:microsoft:sharepoint_server:-:*:*:*:subscription:*:*:*"],"platforms":["x64-based Systems"]},{"vendor":"Microsoft","product":"SharePoint Server Subscription Edition Language Pack","versions":[{"version":"16.0.0","status":"affected","lessThan":"16.0.14326.20620","versionType":"custom"}],"cpes":["cpe:2.3:a:microsoft:sharepoint_server:-:language_pack:*:*:subscription:*:*:*"],"platforms":["x64-based Systems"]},{"vendor":"Microsoft","product":"Microsoft SharePoint Foundation 2013 Service Pack 1","versions":[{"version":"15.0.0","status":"affected","lessThan":"15.0.5407.1000","versionType":"custom"}],"cpes":["cpe:2.3:a:microsoft:sharepoint_foundation:2013:sp1:*:*:*:*:*:*"],"platforms":["x64-based Systems"]}],"references":[{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-42294","tags":["x_refsource_MISC"]}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en-US","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","baseSeverity":"HIGH","baseScore":7.2,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"}}],"problemTypes":[{"descriptions":[{"description":"Remote Code Execution","lang":"en-US","type":"Impact"}]}],"providerMetadata":{"shortName":"microsoft","orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","dateUpdated":"2024-05-29T14:44:15.389Z"},"datePublic":"2021-12-14T08:00:00.000Z"},"adp":[{"title":"CVE Program Container","references":[{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-42294","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-04T03:30:37.737Z"}}]}}}