cbcvebase.
CVE-2021-28482
published 2021-04-13

CVE-2021-28482: Microsoft Exchange Server Remote Code Execution Vulnerability

high8.8CVSS 3.1
AVNACLPRLUINSUCHIHAH
EXPLOIT
Microsoft Exchange Server Remote Code Execution Vulnerability

Affected

13 ranges
VendorProductVersion rangeFixed in
microsoftexchange_server
microsoftexchange_server
microsoftexchange_server
microsoftmicrosoft_exchange_server_2013_cumulative_update_23>= 15.00.0 < 15.00.1497.01515.00.1497.015
microsoftmicrosoft_exchange_server_2016_cumulative_update_19>= 15.01.0 < 15.01.2176.01215.01.2176.012
microsoftmicrosoft_exchange_server_2016_cumulative_update_20>= 15.01.0 < 15.01.2242.00815.01.2242.008
microsoftmicrosoft_exchange_server_2019_cumulative_update_8>= 15.02.0 < 15.02.0792.01315.02.0792.013
microsoftmicrosoft_exchange_server_2019_cumulative_update_9>= 15.02.0 < 15.02.0858.01015.02.0858.010
msrcmicrosoft_exchange_server_2013_cumulative_update_23
msrcmicrosoft_exchange_server_2016_cumulative_update_19
msrcmicrosoft_exchange_server_2016_cumulative_update_20
msrcmicrosoft_exchange_server_2019_cumulative_update_8
msrcmicrosoft_exchange_server_2019_cumulative_update_9

CVSS provenance

nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
vulncheck8.8HIGH