7.2

CVE-2021-31196

Warning

Microsoft Exchange Server Remote Code Execution Vulnerability

Data is provided by the National Vulnerability Database (NVD)
Microsoft ≫ Exchange Server Version2013 Updatecumulative_update_23
Microsoft ≫ Exchange Server Version2016 Updatecumulative_update_20
Microsoft ≫ Exchange Server Version2016 Updatecumulative_update_21
Microsoft ≫ Exchange Server Version2019 Updatecumulative_update_10
Microsoft ≫ Exchange Server Version2019 Updatecumulative_update_9

21.08.2024: CISA Known Exploited Vulnerabilities (KEV) Catalog

Microsoft Exchange Server Information Disclosure Vulnerability

Vulnerability

Microsoft Exchange Server contains an information disclosure vulnerability that allows for remote code execution.

Description

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Required actions
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 3.76% 0.875
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 6.5 8 6.4
AV:N/AC:L/Au:S/C:P/I:P/A:P
nvd@nist.gov 7.2 1.2 5.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
secure@microsoft.com 7.2 1.2 5.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H