Lucene search

K
nvd[email protected]NVD:CVE-2023-21717
HistoryFeb 14, 2023 - 8:15 p.m.

CVE-2023-21717

2023-02-1420:15:14
CWE-284
web.nvd.nist.gov
microsoft sharepoint server
elevation of privilege
vulnerability

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.6%

Microsoft SharePoint Server Elevation of Privilege Vulnerability

Affected configurations

NVD
Node
microsoftsharepoint_enterprise_serverMatch2013sp1
OR
microsoftsharepoint_enterprise_serverMatch2016
OR
microsoftsharepoint_foundationMatch2013sp1
OR
microsoftsharepoint_serverMatch-subscription
OR
microsoftsharepoint_serverMatch2019

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.6%