CVE-2021-31207
published 2021-05-11CVE-2021-31207: Microsoft Exchange Server Security Feature Bypass Vulnerability
medium6.6CVSS 3.1
AVNACHPRHUINSUCHIHAH
KEVITWEXPLOIT
CISA Known Exploited Vulnerabilitydue 2021-11-17
Exploited in the wild
Microsoft Exchange Server Security Feature Bypass Vulnerability
Affected
13 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| microsoft | exchange_server | — | — |
| microsoft | exchange_server | — | — |
| microsoft | exchange_server | — | — |
| microsoft | microsoft_exchange_server_2013_cumulative_update_23 | >= 15.00.0 < 15.00.1497.018 | 15.00.1497.018 |
| microsoft | microsoft_exchange_server_2016_cumulative_update_19 | >= 15.01.0 < 15.01.2176.014 | 15.01.2176.014 |
| microsoft | microsoft_exchange_server_2016_cumulative_update_20 | >= 15.01.0 < 15.01.2242.010 | 15.01.2242.010 |
| microsoft | microsoft_exchange_server_2019_cumulative_update_8 | >= 15.02.0 < 15.02.0792.015 | 15.02.0792.015 |
| microsoft | microsoft_exchange_server_2019_cumulative_update_9 | >= 15.02.0 < 15.02.0858.012 | 15.02.0858.012 |
| msrc | microsoft_exchange_server_2013_cumulative_update_23 | — | — |
| msrc | microsoft_exchange_server_2016_cumulative_update_19 | — | — |
| msrc | microsoft_exchange_server_2016_cumulative_update_20 | — | — |
| msrc | microsoft_exchange_server_2019_cumulative_update_8 | — | — |
| msrc | microsoft_exchange_server_2019_cumulative_update_9 | — | — |
CVSS provenance
nvdv3.16.6MEDIUMCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
vulncheck6.6MEDIUM
cisa6.6MEDIUM