{"schema":"vulnpedia.research/1","cve":"CVE-2021-3199","references":[{"url":"https://github.com/ONLYOFFICE/DocumentServer/blob/903fe5ab7a275bd69c3c3346af2d21cf87ebeabf/CHANGELOG.md#563","tags":["x_refsource_CONFIRM","x_transferred","Release Notes","Third Party Advisory"],"source":"mitre","sourceId":"mitre","modified":"2022-03-21T20:03:15.000Z","origins":[{"source":"mitre","sourceId":"mitre","modified":"2022-03-21T20:03:15.000Z","url":"https://github.com/ONLYOFFICE/DocumentServer/blob/903fe5ab7a275bd69c3c3346af2d21cf87ebeabf/CHANGELOG.md#563"},{"source":"mitre","sourceId":"CVE","modified":"2024-08-03T16:45:51.411Z","url":"https://github.com/ONLYOFFICE/DocumentServer/blob/903fe5ab7a275bd69c3c3346af2d21cf87ebeabf/CHANGELOG.md#563"},{"source":"nvd","sourceId":"CVE-2021-3199","modified":"2026-10-09T14:20:47.350","url":"https://github.com/ONLYOFFICE/DocumentServer/blob/903fe5ab7a275bd69c3c3346af2d21cf87ebeabf/CHANGELOG.md#563"}]},{"url":"https://github.com/nola-milkin/poc_exploits/blob/master/CVE-2021-3199/poc_uploadImageFile.py","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory"],"source":"mitre","sourceId":"mitre","modified":"2022-03-21T20:03:15.000Z","origins":[{"source":"mitre","sourceId":"mitre","modified":"2022-03-21T20:03:15.000Z","url":"https://github.com/nola-milkin/poc_exploits/blob/master/CVE-2021-3199/poc_uploadImageFile.py"},{"source":"mitre","sourceId":"CVE","modified":"2024-08-03T16:45:51.411Z","url":"https://github.com/nola-milkin/poc_exploits/blob/master/CVE-2021-3199/poc_uploadImageFile.py"},{"source":"nvd","sourceId":"CVE-2021-3199","modified":"2026-10-09T14:20:47.350","url":"https://github.com/nola-milkin/poc_exploits/blob/master/CVE-2021-3199/poc_uploadImageFile.py"}]},{"url":"https://github.com/moehw/poc_exploits/tree/master/CVE-2021-3199/poc_uploadImageFile.py","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory"],"source":"mitre","sourceId":"mitre","modified":"2022-03-21T20:03:15.000Z","origins":[{"source":"mitre","sourceId":"mitre","modified":"2022-03-21T20:03:15.000Z","url":"https://github.com/moehw/poc_exploits/tree/master/CVE-2021-3199/poc_uploadImageFile.py"},{"source":"mitre","sourceId":"CVE","modified":"2024-08-03T16:45:51.411Z","url":"https://github.com/moehw/poc_exploits/tree/master/CVE-2021-3199/poc_uploadImageFile.py"},{"source":"nvd","sourceId":"CVE-2021-3199","modified":"2026-10-09T14:20:47.350","url":"https://github.com/moehw/poc_exploits/tree/master/CVE-2021-3199/poc_uploadImageFile.py"}]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-3199","tags":["government-resource","US Government Resource"],"source":"mitre","sourceId":"CISA-ADP","modified":"2026-10-09T03:55:31.111Z","origins":[{"source":"mitre","sourceId":"CISA-ADP","modified":"2026-10-09T03:55:31.111Z","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-3199"},{"source":"nvd","sourceId":"CVE-2021-3199","modified":"2026-10-09T14:20:47.350","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-3199"}]},{"source":"euvd","sourceId":"EUVD-2021-26539","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-26539","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2021-26539","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-26539"}]},{"url":"https://vulncheck.com/kev","tags":["ADVISORY"],"source":"vulncheck-kev","sourceId":"CVE-2021-3199","modified":"2026-10-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2021-3199","modified":"2026-10-08T00:00:00Z","url":"https://vulncheck.com/kev"}]},{"url":"https://www.cisa.gov/news-events/cybersecurity-advisories/aa26-281a","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2021-3199","modified":"2026-10-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2021-3199","modified":"2026-10-08T00:00:00Z","url":"https://www.cisa.gov/news-events/cybersecurity-advisories/aa26-281a"}]},{"url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2021-3199","modified":"2026-10-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2021-3199","modified":"2026-10-08T00:00:00Z","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}]}],"packages":[],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[],"exploitationSources":[{"source":"vulncheck-kev","sourceId":"CVE-2021-3199","catalog":"VulnCheck KEV","kind":"catalogue","url":"https://vulncheck.com/kev","dateAdded":"2026-10-08T00:00:00Z","modified":"2026-10-08T00:00:00Z","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","knownRansomwareCampaignUse":"Unknown","reportedByVulncheckCanaries":false,"vendorProject":"ONLYOFFICE","product":"Docs","dueDate":"2026-10-11T00:00:00Z","cisaDateAdded":"2026-10-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2021-3199","modified":"2026-10-08T00:00:00Z","url":"https://vulncheck.com/kev"}]},{"source":"vulncheck-kev","sourceId":"CVE-2021-3199","catalog":"VulnCheck KEV","kind":"report","url":"https://www.cisa.gov/news-events/cybersecurity-advisories/aa26-281a","dateAdded":"2026-10-08T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2021-3199","url":"https://www.cisa.gov/news-events/cybersecurity-advisories/aa26-281a"},{"source":"vulncheck-kev","sourceId":"CVE-2021-3199","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}]}]}