Skip to content
OpenAdvisories
High · 7.8 CVE-2021-31198 EUVD-2021-18111GHSA-q258-48f4-r94w

Microsoft Exchange Server Remote Code Execution Vulnerability

Published May 11, 2021 · Updated Feb 28, 2025 · Assigned by microsoft

Vendor: Microsoft Product: Microsoft Exchange Server 2013 Cumulative Update 23 Product: Microsoft Exchange Server 2016 Cumulative Update 19 Product: Microsoft Exchange Server 2016 Cumulative Update 20 Product: Microsoft Exchange Server 2019 Cumulative Update 8 Product: Microsoft Exchange Server 2019 Cumulative Update 9

Description

Microsoft Exchange Server Remote Code Execution Vulnerability

Affected products

VendorProductAffectedFixed
Microsoft Microsoft Exchange Server 2019 Cumulative Update 9 15.02.0 – < 15.02.0858.012 15.02.0858.012
Microsoft Microsoft Exchange Server 2016 Cumulative Update 20 15.01.0 – < 15.01.2242.010 15.01.2242.010
Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 15.00.0 – < 15.00.1497.018 15.00.1497.018
Microsoft Microsoft Exchange Server 2016 Cumulative Update 19 15.01.0 – < 15.01.2176.014 15.01.2176.014
Microsoft Microsoft Exchange Server 2019 Cumulative Update 8 15.02.0 – < 15.02.0792.015 15.02.0792.015

References