Skip to content
OpenAdvisories
Critical · 9.1 Known exploited · Ransomware Publicly disclosed Scanner template Public exploit CVE-2021-34473 EUVD-2021-21128GHSA-fgq9-p33g-xcfc

Microsoft Exchange Server Remote Code Execution Vulnerability

Published Jul 14, 2021 · Updated Aug 10, 2026 · Assigned by microsoft

Vendor: Microsoft Product: Microsoft Exchange Server 2013 Cumulative Update 23 Product: Microsoft Exchange Server 2016 Cumulative Update 19 Product: Microsoft Exchange Server 2016 Cumulative Update 20 Product: Microsoft Exchange Server 2019 Cumulative Update 8 Product: Microsoft Exchange Server 2019 Cumulative Update 9

Description

Microsoft Exchange Server Remote Code Execution Vulnerability

Affected products

VendorProductAffectedFixed
Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 15.00.0 – < 15.00.1497.015 15.00.1497.015
Microsoft Microsoft Exchange Server 2016 Cumulative Update 19 15.01.0 – < 15.01.2176.012 15.01.2176.012
Microsoft Microsoft Exchange Server 2016 Cumulative Update 20 15.01.0 – < 15.01.2242.008 15.01.2242.008
Microsoft Microsoft Exchange Server 2019 Cumulative Update 8 15.02.0 – < 15.02.0792.013 15.02.0792.013
Microsoft Microsoft Exchange Server 2019 Cumulative Update 9 15.02.0 – < 15.02.0858.010 15.02.0858.010

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

Metasploit 1 module

GitHub 9 repositories

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

Automated scanner template

A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.

Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.

Advisories 2

References