First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2022-21968

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

Microsoft SharePoint Server Security Feature Bypass Vulnerability

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Affected software

Vendor	Product	Versions
Microsoft	Microsoft SharePoint Enterprise Server 2016	>= 16.0.0, < 16.0.5278.1000
Microsoft	Microsoft SharePoint Server 2019	>= 16.0.0, < 16.0.10383.20001
Microsoft	Microsoft SharePoint Server Subscription Edition	>= 16.0.0, < 16.0.14326.20742
Microsoft	Microsoft SharePoint Foundation 2013 Service Pack 1	>= 15.0.0, < 15.0.5423.1000

References

Timeline

Published: Feb 9, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-219699.0Microsoft Exchange Server Remote Code Execution Vulnerability CVE-2022-21979.8By using a specific credential string, an attacker with network access to the device’s web interface could circumvent the authentication sch CVE-2022-219706.1Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability CVE-2022-219717.8Windows Runtime Remote Code Execution Vulnerability CVE-2022-219728.1Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability CVE-2022-219735.5Windows Media Center Update Denial of Service Vulnerability CVE-2022-219747.8Roaming Security Rights Management Services Remote Code Execution Vulnerability CVE-2022-219754.7Windows Hyper-V Denial of Service Vulnerability CVE-2022-219773.3Media Foundation Information Disclosure Vulnerability CVE-2022-219788.2Microsoft Exchange Server Elevation of Privilege Vulnerability CVE-2022-219794.8Microsoft Exchange Server Information Disclosure Vulnerability CVE-2022-21984.3The WPQA Builder WordPress plugin before 5.7 which is a companion plugin to the Hilmer and Discy , does not check authorization before displ

CVE-2022-21968: Medium severity, CVSS 4.3 | Vulnix