Is CVE-2021-40843 actively exploited?

No active exploitation of CVE-2021-40843 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2021-40843 be exploited remotely?

No. CVE-2021-40843 requires local access to exploit.

What is the CVSS score of CVE-2021-40843?

CVE-2021-40843 has a CVSS score of 7.3 (HIGH).

HOME VULNERABILITIESCVE-2021-40843

HIGH

CVE-2021-40843

CWE-502Published: October 13, 2021· Updated: Jun 17, 2026

7.3

CVSS v3.1

Official Description

Proofpoint Insider Threat Management Server contains an unsafe deserialization vulnerability in the Web Console. An attacker with write access to the local database could cause arbitrary code to execute with SYSTEM privileges on the underlying server when a Web Console user triggers retrieval of that data. When chained with a SQL injection vulnerability, the vulnerability could be exploited remotely if Web Console users click a series of maliciously crafted URLs. All versions prior to 7.11.2 are affected.

NVD Source

Technical Analysis

CVE-2021-40843 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires low privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 7.3.

From a weakness classification perspective (CWE-502): Insecure deserialization vulnerabilities allow attackers to inject malicious objects during deserialization, potentially enabling remote code execution.