CVE-2021-31181

Mô tả

Tham khảo

• packetstormsecurity.com/files/163208/Microsoft-SharePoint-Unsafe-Control-And-ViewState-Remote-Code-Execution.html · Exploit
• portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31181 · Patch
• zerodayinitiative.com/advisories/ZDI-21-573 · Third Party Advisory
• packetstorm.news/files/id/163208

Lỗ hổng khác của sharepoint enterprise server

• CVE-2025-54905CAO 7.1Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
• CVE-2025-53736TRUNG BÌNH 6.2Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
• CVE-2025-53733CAO 8.4Incorrect conversion between numeric types in Microsoft Office Word allows an unauthorized attacker to execute code locally.
• CVE-2025-49706TRUNG BÌNH 6.5ĐANG BỊ KHAI THÁC (CISA KEV)Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
• CVE-2025-47994CAO 8.6Deserialization of untrusted data in Microsoft Office allows an unauthorized attacker to elevate privileges locally.