Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-26854
6.6MEDIUM
Key Information:
What is CVE-2021-26854?
Microsoft Exchange Server Remote Code Execution Vulnerability
Affected Version(s)
Microsoft Exchange Server 2013 Cumulative Update 23 x64-based Systems 15.00.0 < 15.00.1497.012
Microsoft Exchange Server 2016 Cumulative Update 18 x64-based Systems 15.01.0 < 15.01.2106.013
Microsoft Exchange Server 2016 Cumulative Update 19 x64-based Systems 15.01.0 < 15.01.2176.009
References
EPSS Score
22% chance of being exploited in the next 30 days.
CVSS V3.1
Score:
6.6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved