CVE-2021-26855 Microsoft Exchange Server Remote Code Execution Vulnerability
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: Microsoft Exchange Server 2016 Cumulative Update 19
cpes: cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_19:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft Exchange Server 2019 Cumulative Update 8
cpes: cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_8:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft Exchange Server 2019
cpes: cpe:2.3:a:microsoft:exchange_server:2019:*:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft Exchange Server 2013 Cumulative Update 22
cpes: cpe:2.3:a:microsoft:exchange_server:2013:cumulative_update_22:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft Exchange Server 2019 Cumulative Update 2
cpes: cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_2:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft Exchange Server 2016 Cumulative Update 13
cpes: cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_13:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft Exchange Server 2013 Cumulative Update 23
cpes: cpe:2.3:a:microsoft:exchange_server:2013:cumulative_update_23:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft Exchange Server 2019 Cumulative Update 3
cpes: cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_3:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft Exchange Server 2016 Cumulative Update 14
cpes: cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_14:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft Exchange Server 2019 Cumulative Update 4
cpes: cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_4:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft Exchange Server 2016 Cumulative Update 15
cpes: cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_15:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft Exchange Server 2019 Cumulative Update 5
cpes: cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_5:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft Exchange Server 2019 Cumulative Update 6
cpes: cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_6:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft Exchange Server 2016 Cumulative Update 16
cpes: cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_16:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft Exchange Server 2016 Cumulative Update 17
cpes: cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_17:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft Exchange Server 2019 Cumulative Update 7
cpes: cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_7:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft Exchange Server 2016 Cumulative Update 18
cpes: cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_18:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft Exchange Server 2013 Cumulative Update 21
cpes: cpe:2.3:a:microsoft:exchange_server:2013:cumulative_update_21:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft Exchange Server 2016 Cumulative Update 12
cpes: cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_12:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft Exchange Server 2016 Cumulative Update 8
cpes: cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_8:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft Exchange Server 2019 Cumulative Update 1
cpes: cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_1:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft Exchange Server 2016 Cumulative Update 9
cpes: cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_9:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft Exchange Server 2016 Cumulative Update 10
cpes: cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_10:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft Exchange Server 2016 Cumulative Update 11
cpes: cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_11:*:*:*:*:*:*
CVSS v3.1: version: 3.1
baseSeverity: CRITICAL
baseScore: 9.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:F/RL:O/RC:C
Published: 2021-03-02T23:55:26.000Z