Every CVE Search/ Get API key

CVE-2021-34467

Microsoft SharePoint Server Remote Code Execution Vulnerability

7.1 High

Microsoft SharePoint Server Remote Code Execution Vulnerability

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
High
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
Low

Exploit likelihood

6.59%Up 5.7 points since Jul 17, 2021
90%50%10%1%

What each source reports

CVE List Score used 7.1

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Record
CVE-2021-34467
CVSS 3.1
7.1 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L/E:U/RL:O/RC:C
Updated
2026-11-02
EUVDEUVD-2021-21122 7.1

Microsoft SharePoint Server Remote Code Execution Vulnerability

Record
EUVD-2021-21122
CVSS 3.1
7.1 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L/E:U/RL:O/RC:C
Updated
2026-11-02
GitHub AdvisoriesGHSA-q9h6-px4c-2cqp 7.1

Microsoft SharePoint Server Remote Code Execution Vulnerability This CVE ID is unique from CVE...

Microsoft SharePoint Server Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-34468, CVE-2021-34520.

Record
GHSA-q9h6-px4c-2cqp
CVSS 3.1
7.1 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L
Updated
2026-11-02
NVD 7.1

Microsoft SharePoint Server Remote Code Execution Vulnerability

Record
CVE-2021-34467
CVSS 3.1
7.1 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
6.5 MediumAV:N/AC:L/Au:S/C:P/I:P/A:P
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
first indexedCVE List, EUVD, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2021-34467 is a high vulnerability (CVSS 7.1) in Microsoft Sharepoint Server, published July 16, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.59%, the 93rd percentile. No source names a fixed version.

References

MoveEnter Open