{"id":"CVE-2021-31181","published":"2021-05-11T19:11:30Z","modified":"2025-02-28T20:29:15Z","title":"Microsoft SharePoint Remote Code Execution Vulnerability","vendor":"Microsoft","product":"Microsoft SharePoint Enterprise Server 2016","tier":"tail","description":{"text":"Microsoft SharePoint Remote Code Execution Vulnerability","provenance":"source","from":"CVE.org"},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.29011,"percentile":0.98153,"provenance":"source"},"cwes":[{"id":"CWE-94","name":"Improper Control of Generation of Code"}],"references":[{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31181","tags":["x_refsource_MISC"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-21-573/","tags":["x_refsource_MISC"]},{"url":"http://packetstormsecurity.com/files/163208/Microsoft-SharePoint-Unsafe-Control-And-ViewState-Remote-Code-Execution.html","tags":["x_refsource_MISC"]},{"url":"https://packetstorm.news/files/id/163208","tags":["exploit"]}],"priority":{"score":30.8,"factors":[{"name":"EPSS percentile","points":19.63},{"name":"Public exploit code","points":5.0},{"name":"CVSS severity","points":6.16}]},"exploitSources":{"metasploit":[{"name":"Microsoft SharePoint Unsafe Control and ViewState RCE","module":"exploit/windows/http/sharepoint_unsafe_control","type":"exploit","disclosureDate":"2021-05-11","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/sharepoint_unsafe_control.rb"}],"first":{"date":"2021-05-11","source":"Metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/sharepoint_unsafe_control.rb"},"provenance":"source"},"vendorSlug":"microsoft","affectedVersions":[{"vendor":"Microsoft","product":"Microsoft SharePoint Enterprise Server 2016","versions":[">= 16.0.0, < 16.0.5161.1000"]},{"vendor":"Microsoft","product":"Microsoft SharePoint Server 2019","versions":[">= 16.0.0, < 16.0.10374.20000"]},{"vendor":"Microsoft","product":"Microsoft SharePoint Foundation 2013 Service Pack 1","versions":[">= 15.0.0, < 15.0.5345.1000"]}],"euvd":{"id":"EUVD-2021-18094","exploited":false,"provenance":"source"},"exploitRefs":["https://packetstorm.news/files/id/163208","http://packetstormsecurity.com/files/163208/Microsoft-SharePoint-Unsafe-Control-And-ViewState-Remote-Code-Execution.html"],"lineage":{"familyId":"fam-class-microsoft-sharepoint-cwe-94"}}