Microsoft Exchange Server Spoofing Vulnerability
CVE-2021-42305

6.5MEDIUM

Key Information:

Vendor: Microsoft
Status: Microsoft Exchange Server 2013 Cumulative Update 23; Microsoft Exchange Server 2016 Cumulative Update 21; Microsoft Exchange Server 2019 Cumulative Update 10; Microsoft Exchange Server 2016 Cumulative Update 22
Vendor: CVE Published:; 10 November 2021

Microsoft Exchange Server Spoofing Vulnerability

Microsoft Exchange Server 2013 Cumulative Update 23 x64-based Systems 15.00.0 < 15.00.1497.026

Microsoft Exchange Server 2016 Cumulative Update 21 x64-based Systems 15.01.0 < 15.01.2308.020

Microsoft Exchange Server 2016 Cumulative Update 22 x64-based Systems 15.0.0 < 15.01.2375.017

0% chance of being exploited in the next 30 days.

Score:

6.5

Severity:

MEDIUM

Confidentiality:

None

Integrity:

High

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Unchanged

NVD DatabaseMitre Database