CVE-2023-21717

HighCVSS 8.8/10Last modified Aug 19, 2026

Description

Microsoft SharePoint Server Elevation of Privilege Vulnerability

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-284

Affected software

VendorProductVersions
MicrosoftMicrosoft SharePoint Enterprise Server 2013 Service Pack 1>= 15.0.0, < 15.0.5529.1000
MicrosoftMicrosoft SharePoint Enterprise Server 2016>= 16.0.0, < 16.0.5383.1000
MicrosoftMicrosoft SharePoint Foundation 2013 Service Pack 1>= 15.0.0, < 15.0.5529.1000
MicrosoftMicrosoft SharePoint Server 2019>= 16.0.0, < 16.0.10395.20001
MicrosoftMicrosoft SharePoint Server Subscription Edition>= 16.0.0, < 16.0.15601.20478

References

Timeline

Published
Feb 14, 2023
Last modified
Aug 19, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-217187.8Microsoft ODBC Driver for SQL Server Remote Code Execution VulnerabilityCVE-2023-217196.5Microsoft Edge (Chromium-based) Security Feature Bypass VulnerabilityCVE-2023-21724.3The BadgeOS plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 3.7.1.6. This is due toCVE-2023-217205.3Microsoft Edge (Chromium-based) Tampering VulnerabilityCVE-2023-217216.5Microsoft OneNote Elevation of Privilege VulnerabilityCVE-2023-217225.0.NET Framework Denial of Service VulnerabilityCVE-2023-217247.8Microsoft DWM Core Library Elevation of Privilege VulnerabilityCVE-2023-217256.3Windows Malicious Software Removal Tool Elevation of Privilege VulnerabilityCVE-2023-217267.8Windows Credential Manager User Interface Elevation of Privilege VulnerabilityCVE-2023-217278.8Remote Procedure Call Runtime Remote Code Execution VulnerabilityCVE-2023-217287.5Windows Netlogon Denial of Service VulnerabilityCVE-2023-217295.3Remote Procedure Call Runtime Information Disclosure Vulnerability
CVE-2023-21717: High severity, CVSS 8.8 | Vulnix