CVE-2022-24472: Microsoft SharePoint Server Spoofing Vulnerability
Published Apr 12, 2022
·Updated
Microsoft SharePoint Server Spoofing Vulnerability
Affected Software
10 affected componentsFixes available
Microsoft SharePoint Foundation 2013
Microsoft SharePoint Server 2019
Microsoft SharePoint Server Subscription Edition
Microsoft SharePoint Foundation=2013-sp1
Microsoft SharePoint Server
Microsoft SharePoint Server=2016
Microsoft SharePoint Server=2016
Microsoft SharePoint Server=2019
Microsoft SharePoint Server 2016
Microsoft SharePoint Enterprise Server 2016
Event History
Apr 12, 2022
CVE Published
via Microsoft·08:00 AM
Data Sourced
via Microsoft·08:00 AM
DescriptionSeverityWeakness
Data Sourced
via Microsoft·08:00 AM
Affected Software
Updated
via Microsoft·08:00 AM
Description
Apr 15, 2022
CVE Published
via MITRE·07:02 PM
Data Sourced
via MITRE·07:02 PM
DescriptionSeverity
Frequently Asked Questions
1
What is the severity of CVE-2022-24472?
The severity of CVE-2022-24472 is high.
2
Which versions of Microsoft SharePoint Server are affected by CVE-2022-24472?
Microsoft SharePoint Foundation 2013 (SP1), Microsoft SharePoint Server Subscription Edition, Microsoft SharePoint Server 2016, and Microsoft SharePoint Server 2019 are all affected by CVE-2022-24472.
3
What is the impact of CVE-2022-24472?
CVE-2022-24472 allows spoofing, which could lead to unauthorized actions or access to sensitive information.
4
How can I fix CVE-2022-24472?
Apply the relevant patches provided by Microsoft for the affected versions of Microsoft SharePoint Server.
5
Where can I find more information about CVE-2022-24472?
You can refer to the official Microsoft Security Response Center (MSRC) for more information about CVE-2022-24472.