CVE-2021-24104

MediumCVSS 4.6/10Last modified Aug 19, 2026

Description

Microsoft SharePoint Server Spoofing Vulnerability

Metrics

CVSS 3.1 4.6/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N

Affected software

VendorProductVersions
MicrosoftMicrosoft SharePoint Enterprise Server 2016>= 16.0.0, < 16.0.5134.1000
MicrosoftMicrosoft SharePoint Foundation 2013 Service Pack 1>= 15.0.0, < 15.0.5327.1000
MicrosoftMicrosoft SharePoint Server 2019>= 16.0.0, < 16.0.10372.20000

References

Timeline

Published
Mar 11, 2021
Last modified
Aug 19, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-241058.4<p>Depending on configuration of various package managers it is possible for an attacker to insert a malicious package into a package manageCVE-2021-241065.5Windows DirectX Information Disclosure VulnerabilityCVE-2021-241075.5Windows Event Tracing Information Disclosure VulnerabilityCVE-2021-241087.8Microsoft Office Remote Code Execution VulnerabilityCVE-2021-241096.8Microsoft Azure Kubernetes Service Elevation of Privilege VulnerabilityCVE-2021-24113.7Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: JS module). Supported versions that are affected are 8.0.25 CVE-2021-241107.8HEVC Video Extensions Remote Code Execution VulnerabilityCVE-2021-241117.5.NET Framework Denial of Service VulnerabilityCVE-2021-241128.1.NET Core Remote Code Execution VulnerabilityCVE-2021-241135.4Microsoft Edge (Chromium-based) Security Feature Bypass VulnerabilityCVE-2021-241145.7Microsoft Teams iOS Information Disclosure VulnerabilityCVE-2021-241159.8In Botan before 2.17.3, constant-time computations are not used for certain decoding and encoding operations (base32, base58, base64, and he
CVE-2021-24104: Medium severity, CVSS 4.6 | Vulnix