Cyber Resilience

CVE-2021-28474

High

Published: 11 May 2021

Published
11 May 2021
Modified
21 November 2024
KEV Added
—
Patch
—
CVSS Score v3.1 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score 0.1408 94.5th percentile
Risk Priority 26 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2021-28474 is a high-severity Interpretation Conflict (CWE-436) vulnerability in Microsoft Sharepoint Server. Its CVSS base score is 8.8 (High).

Operationally, ranked in the top 5.5% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability details

Microsoft SharePoint Server Remote Code Execution Vulnerability

CWE(s)
CWE-436

Related Threats

Threat-Actor AttributionAI

SharePoint ToolShell Exploitation (C0058)
SharePoint Under Siege: ToolShell Exploit (CVE-2025-49706 & CVE-2025-49704) - Eye Research

Affected Assets

microsoft
sharepoint foundation
2013
microsoft
sharepoint server
2016, 2019

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References