High 1 exploited CVE MSRC-CVE-2021-31196 1 CVE

Microsoft Exchange Server Remote Code Execution Vulnerability

Published Jul 13, 2021 · Updated Jul 13, 2021

Vendor: Microsoft

Summary

Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

Security updates
15.02.0858.015 — https://support.microsoft.com/help/5004780
15.01.2242.012 — https://support.microsoft.com/help/5004779
15.00.1497.023 — https://support.microsoft.com/help/5004778

Vulnerabilities 1

High 7.2

CVE-2021-31196 Exploited EPSS 54%

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2016 Cumulative Update 21 Microsoft Exchange Server 2019 Cumulative Update 10

Jul 14, 2021
KEV Aug 21, 2024

Revision history

2021-07-13 #1
Information published.

References

CVE-2021-31196 Microsoft Exchange Server Remote Code Execution Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-31196
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
Common Vulnerability Scoring System
https://www.first.org/cvss