First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2022-21987

HighCVSS 8.0/10Last modified Jun 17, 2026

Description

Microsoft SharePoint Server Spoofing Vulnerability

Metrics

CVSS 3.1 8.0/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Affected software

Vendor	Product	Versions
Microsoft	Microsoft SharePoint Enterprise Server 2016	>= 16.0.0, < 16.0.5278.1000
Microsoft	Microsoft SharePoint Enterprise Server 2013 Service Pack 1	>= 15.0.0, < 15.0.5423.1000
Microsoft	Microsoft SharePoint Server 2019	>= 16.0.0, < 16.0.10383.20001
Microsoft	Microsoft SharePoint Server Subscription Edition	>= 16.0.0, < 16.0.14326.20742

References

Timeline

Published: Feb 9, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-219887.8Microsoft Office Visio Remote Code Execution Vulnerability CVE-2022-219897.8Windows Kernel Elevation of Privilege Vulnerability CVE-2022-21996.1The main MiCODUS MV720 GPS tracker web server has a reflected cross-site scripting vulnerability that could allow an attacker to gain contro CVE-2022-219908.8Remote Desktop Client Remote Code Execution Vulnerability CVE-2022-219918.1Visual Studio Code Remote Development Extension Remote Code Execution Vulnerability CVE-2022-219927.8Windows Mobile Device Management Remote Code Execution Vulnerability CVE-2022-219937.5Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability CVE-2022-219947.8Windows DWM Core Library Elevation of Privilege Vulnerability CVE-2022-219957.9Windows Hyper-V Remote Code Execution Vulnerability CVE-2022-219967.8Win32k Elevation of Privilege Vulnerability CVE-2022-219977.1Windows Print Spooler Elevation of Privilege Vulnerability CVE-2022-219985.5Windows Common Log File System Driver Information Disclosure Vulnerability

CVE-2022-21987: High severity, CVSS 8.0 | Vulnix