CVE-2021-40484

HighCVSS 7.6/10Last modified Jun 17, 2026

Description

Microsoft SharePoint Server Spoofing Vulnerability

Metrics

CVSS 3.1 7.6/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N

Affected software

VendorProductVersions
MicrosoftMicrosoft SharePoint Enterprise Server 2016>= 16.0.0, < 16.0.5227.1000
MicrosoftMicrosoft SharePoint Server 2019>= 16.0.0, < 16.0.10379.20000
MicrosoftMicrosoft SharePoint Foundation 2013 Service Pack 1>= 15.0.0, < 15.0.5389.1000

References

Timeline

Published
Oct 13, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-404857.8Microsoft Excel Remote Code Execution VulnerabilityCVE-2021-404867.8Microsoft Word Remote Code Execution VulnerabilityCVE-2021-404878.1Microsoft SharePoint Server Remote Code Execution VulnerabilityCVE-2021-404887.8Storage Spaces Controller Elevation of Privilege VulnerabilityCVE-2021-404897.8Storage Spaces Controller Elevation of Privilege VulnerabilityCVE-2021-40496.5livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)CVE-2021-404907.0A race condition was discovered in ext4_write_inline_data_end in fs/ext4/inline.c in the ext4 subsystem in the Linux kernel through 5.13.13.CVE-2021-404916.5The ftp client in GNU Inetutils before 2.2 does not validate addresses returned by PASV/LSPV responses to make sure they match the server adCVE-2021-404926.1A reflected XSS vulnerability exists in multiple pages in version 22 of the Gibbon application that allows for arbitrary execution of JavaScCVE-2021-404939.8Zoho ManageEngine OpManager before 125437 is vulnerable to SQL Injection in the support diagnostics module. This occurs via the pollingObjecCVE-2021-404949.8A Hardcoded JWT Secret Key in metadata.py in AdaptiveScale LXDUI through 2.1.3 allows attackers to gain admin access to the host system.CVE-2021-404955.3There are multiple Denial-of Service vulnerabilities in SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 740, 750, 751
CVE-2021-40484: High severity, CVSS 7.6 | Vulnix