CVE-2021-31950
Microsoft SharePoint Server Spoofing Vulnerability
Vexday Risk Score
41Attention
SSVC decision (CISA)
Attend
PoC available → attend closely
Exploit maturity
Proof of concept
Public proof of concept exists, but not yet automated.
CVSS 7.6EPSS 4.6%KEV nãoPoC públicaNuclei —Metasploit —Patch —
Lifecycle
08 Jun 2021Published on NVD
11 Jun 2021Public PoC
Weaponization speed
2 daysto first PoC
Weaponized quickly — attackers prioritized this vulnerability. Patch urgently.
Recommendation: Plan a near-term fix — a public PoC already exists.
Microsoft SharePoint Server Spoofing Vulnerability
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N/E:U/RL:O/RC:C
Affected products
Microsoft · Microsoft SharePoint Enterprise Server 2016Microsoft · Microsoft SharePoint Foundation 2013 Service Pack 1Microsoft · Microsoft SharePoint Server 2019public PoCs found — 2
cve_referencepacketstormsecurity.com/files/163080/Microsoft-SharePoint-Server-16.0.10372.20060-Server-Side-Request-Forgery.htmlunverifiedexploitdbwww.exploit-db.com/exploits/49982unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.