First published: Tue Oct 12 2021(Updated: )
Microsoft SharePoint Server Remote Code Execution Vulnerability
Credit: secure@microsoft.com secure@microsoft.com
Affected Software | Affected Version | How to fix |
---|---|---|
Microsoft SharePoint Server 2019 | ||
Microsoft SharePoint Foundation 2013 | ||
Microsoft SharePoint Enterprise Server 2016 | ||
Microsoft SharePoint Enterprise Server | =2016 | |
Microsoft SharePoint Foundation | =2013-sp1 | |
Microsoft SharePoint Server | =2019 | |
Microsoft SharePoint |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2021-40487 is a vulnerability that allows remote attackers to execute arbitrary code on affected installations of Microsoft SharePoint.
CVE-2021-40487 has a severity rating of 8.8, which is considered high.
CVE-2021-40487 exploits a flaw in the Microsoft.SharePoint.WorkflowActions.SetVariableActivity class, allowing remote attackers to execute arbitrary code.
To fix CVE-2021-40487 on Microsoft SharePoint Server 2019, you can apply the patch provided by Microsoft, which can be downloaded from the official Microsoft website.
You can find more information about CVE-2021-40487 on the Microsoft Security Response Center website, the Microsoft Security Guidance Advisory, and the Zero Day Initiative website.