CVE-2021-34520High· 8.1▾ Abyssal0dayMicrosoft SharePoint Server Remote Code Execution Vulnerability
▾ Abyssal zone — Critical with a public exploit or in-the-wild use
impact 44.6 · likelihood 0.9 · exploitation 25
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Aug 10.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
3.3%
3.3% → 4.4%
Microsoft SharePoint Server Remote Code Execution Vulnerability
sharepoint_foundation = 2013sharepoint_server = 2016sharepoint_server = 2019Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2020-0618High· 8.8A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests, aka 'Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability'.
CVE-2021-26857High· 7.8Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2015-6117Medium· 6.1Microsoft SharePoint Server 2013 SP1 and SharePoint Foundation 2013 SP1 allow remote authenticated users to bypass intended Access Control Policy restrictions and conduct cross-site scripting (XSS) attacks by modifying a webpart, aka "Mi…
CVE-2021-34519Medium· 5.3Microsoft SharePoint Server Information Disclosure Vulnerability
CVE-2021-34517Medium· 5.3Microsoft SharePoint Server Spoofing Vulnerability
CVE-2021-34468High· 7.1Microsoft SharePoint Server Remote Code Execution Vulnerability