CVE-2021-33766

Warnung

EPSS 93.42%
Veröffentlicht 14.07.2021 18:15:10
Zuletzt bearbeitet 07.03.2025 21:54:07
Quelle secure@microsoft.com
Teams Watchlist Login
Unerledigt Login

Microsoft Exchange Server Information Disclosure Vulnerability

Betroffene Produkte Warnungen 1 Metriken 4 CWE 0 Referenzen 5

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ Exchange Server Version2013 Updatecumulative_update_23

Microsoft ≫ Exchange Server Version2016 Updatecumulative_update_19

Microsoft ≫ Exchange Server Version2016 Updatecumulative_update_20

Microsoft ≫ Exchange Server Version2019 Updatecumulative_update_8

Microsoft ≫ Exchange Server Version2019 Updatecumulative_update_9

18.01.2022: CISA Known Exploited Vulnerabilities (KEV) Catalog

Microsoft Exchange Server Information Disclosure

Schwachstelle

Microsoft Exchange Server contains an information disclosure vulnerability which can allow an unauthenticated attacker to steal email traffic from target.

Beschreibung

Apply updates per vendor instructions.

Erforderliche Maßnahmen

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	93.42%	0.998

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N
nvd@nist.gov	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
secure@microsoft.com	7.3	3.9	3.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33766

Patch

Vendor Advisory

https://www.zerodayinitiative.com/advisories/ZDI-21-798/

Third Party Advisory

VDB Entry

https://nvd.nist.gov/vuln/detail/CVE-2021-33766

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2021-33766

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2021-33766

EUVD