description: Microsoft Office Information Disclosure Vulnerability. This CVE ID is unique from CVE-2022-30171, CVE-2022-30172.
problem types: Information Disclosure
affected:
{
defaultStatus: unaffected
product: Microsoft SharePoint Enterprise Server
vendor: Microsoft
versions:
status: affected, version: 2016
status: affected, version: 2013 Service Pack 1
}
{
defaultStatus: unaffected
product: Microsoft SharePoint Server
vendor: Microsoft
versions:
status: affected, version: 2019
}
{
defaultStatus: unaffected
product: Microsoft Office Online Server
vendor: Microsoft
versions:
status: affected, version: unspecified
}
{
defaultStatus: unaffected
product: Microsoft Office Web Apps
vendor: Microsoft
versions:
status: affected, version: Server 2013 Service Pack 1
}
{
defaultStatus: unaffected
product: Microsoft SharePoint Server Subscription Edition
vendor: Microsoft
versions:
status: affected, version: unspecified
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 5.5
baseSeverity: MEDIUM
confidentialityImpact: HIGH
exploitCodeMaturity: UNPROVEN
integrityImpact: NONE
privilegesRequired: NONE
remediationLevel: OFFICIAL_FIX
reportConfidence: CONFIRMED
scope: UNCHANGED
temporalScore: 4.8
temporalSeverity: MEDIUM
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
version: 3.1
]
format: CVSS
scenarios: GENERAL