{"id":"CVE-2022-30159","state":"PUBLISHED","title":"Microsoft Office Information Disclosure Vulnerability","description":"Microsoft Office Information Disclosure Vulnerability","publishedAt":"2022-06-15T21:51:52.000Z","updatedAt":"2025-01-02T19:03:02.371Z","severity":{"score":5.5,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","source":"microsoft"},"assigner":"microsoft","products":["Microsoft Microsoft SharePoint Enterprise Server 2016","Microsoft Microsoft SharePoint Enterprise Server 2013 Service Pack 1","Microsoft Microsoft SharePoint Server 2019","Microsoft Microsoft Office Online Server","Microsoft Microsoft Office Web Apps Server 2013 Service Pack 1","Microsoft Microsoft SharePoint Server Subscription Edition"],"affected":[{"vendor":"Microsoft","product":"Microsoft SharePoint Enterprise Server 2016","versions":[{"version":"16.0.0","status":"affected","lessThan":"16.0.5332.1001","versionType":"custom"}],"platforms":["x64-based Systems"]},{"vendor":"Microsoft","product":"Microsoft SharePoint Enterprise Server 2013 Service Pack 1","versions":[{"version":"15.0.0","status":"affected","lessThan":"15.0.5459.1001","versionType":"custom"}],"platforms":["x64-based Systems"]},{"vendor":"Microsoft","product":"Microsoft SharePoint Server 2019","versions":[{"version":"16.0.0","status":"affected","lessThan":"16.0.10387.20008","versionType":"custom"}],"platforms":["x64-based Systems"]},{"vendor":"Microsoft","product":"Microsoft Office Online Server","versions":[{"version":"16.0.1","status":"affected","lessThan":"16.0.14931.20612","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Microsoft Office Web Apps Server 2013 Service Pack 1","versions":[{"version":"15.0.1","status":"affected","lessThan":"15.0.5459.1001","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Microsoft SharePoint Server Subscription Edition","versions":[{"version":"16.0.0","status":"affected","lessThan":"16.0.14931.20418","versionType":"custom"}],"platforms":["x64-based Systems"]}],"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30159","https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-30159"],"weaknesses":[],"ingestedAt":"2026-10-29T19:50:04.052Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2022/30xxx/CVE-2022-30159.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2022-30159","state":"PUBLISHED","datePublished":"2022-06-15T21:51:52.000Z","dateUpdated":"2025-01-02T19:03:02.371Z","assignerShortName":"microsoft","assignerOrgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","dateReserved":"2022-05-03T00:00:00.000Z"},"containers":{"cna":{"title":"Microsoft Office Information Disclosure Vulnerability","descriptions":[{"lang":"en-US","value":"Microsoft Office Information Disclosure Vulnerability"}],"affected":[{"vendor":"Microsoft","product":"Microsoft SharePoint Enterprise Server 2016","versions":[{"version":"16.0.0","status":"affected","lessThan":"16.0.5332.1001","versionType":"custom"}],"platforms":["x64-based Systems"]},{"vendor":"Microsoft","product":"Microsoft SharePoint Enterprise Server 2013 Service Pack 1","versions":[{"version":"15.0.0","status":"affected","lessThan":"15.0.5459.1001","versionType":"custom"}],"platforms":["x64-based Systems"]},{"vendor":"Microsoft","product":"Microsoft SharePoint Server 2019","versions":[{"version":"16.0.0","status":"affected","lessThan":"16.0.10387.20008","versionType":"custom"}],"platforms":["x64-based Systems"]},{"vendor":"Microsoft","product":"Microsoft Office Online Server","versions":[{"version":"16.0.1","status":"affected","lessThan":"16.0.14931.20612","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Microsoft Office Web Apps Server 2013 Service Pack 1","versions":[{"version":"15.0.1","status":"affected","lessThan":"15.0.5459.1001","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Microsoft SharePoint Server Subscription Edition","versions":[{"version":"16.0.0","status":"affected","lessThan":"16.0.14931.20418","versionType":"custom"}],"platforms":["x64-based Systems"]}],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30159","name":"Microsoft Office Information Disclosure Vulnerability","tags":["vendor-advisory"]}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en-US","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","baseSeverity":"MEDIUM","baseScore":5.5,"vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"}}],"problemTypes":[{"descriptions":[{"description":"Information Disclosure","lang":"en-US","type":"Impact"}]}],"providerMetadata":{"shortName":"microsoft","orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","dateUpdated":"2025-01-02T19:03:02.371Z"},"datePublic":"2022-06-14T07:00:00.000Z","cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sharepoint_server:*:*:*:*:enterprise:*:*:*","versionStartIncluding":"16.0.0","versionEndExcluding":"16.0.5332.1001"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sharepoint_server:*:sp1:*:*:enterprise:*:*:*","versionStartIncluding":"15.0.0","versionEndExcluding":"15.0.5459.1001"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sharepoint_server:*:*:*:*:*:*:*:*","versionStartIncluding":"16.0.0","versionEndExcluding":"16.0.10387.20008"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_online_server:*:*:*:*:*:*:*:*","versionStartIncluding":"16.0.1","versionEndExcluding":"16.0.14931.20612"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_web_apps_server:*:sp1:*:*:*:*:*:*","versionStartIncluding":"15.0.1","versionEndExcluding":"15.0.5459.1001"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sharepoint_server:*:*:*:*:subscription:*:*:*","versionStartIncluding":"16.0.0","versionEndExcluding":"16.0.14931.20418"}]}]}]},"adp":[{"title":"CVE Program Container","references":[{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-30159","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-03T06:40:47.790Z"}}]}}}