Home

CVE-2021-26427

Description

Microsoft Exchange Server Remote Code Execution Vulnerability

Risk Information

Base Score
8.9
MODERATE
Vector
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
EPSS Score
Exploitation Probability
0.522

Associated Vulnerability

VulnerabilityOS Platform
Microsoft Exchange Server Remote Code Execution Vulnerability For Exchange Server 2013 CU23 (KB5007011) CVE-2021-26427Windows
Microsoft Exchange Server Remote Code Execution Vulnerability For Exchange Server 2016 CU21 (KB5007012) (CVE-2021-26427) (CVE-2021-34453) (CVE-2021-41348) (CVE-2021-41350)Windows
Microsoft Exchange Server Remote Code Execution Vulnerability For Exchange Server 2016 CU22 (KB5007012) (CVE-2021-26427) (CVE-2021-34453) (CVE-2021-41348) (CVE-2021-41350)Windows
Microsoft Exchange Server Remote Code Execution Vulnerability For Exchange Server 2019 CU10 (KB5007012) (CVE-2021-26427) (CVE-2021-34453) (CVE-2021-41348) (CVE-2021-41350)Windows
Microsoft Exchange Server Remote Code Execution Vulnerability For Exchange Server 2019 CU11 (KB5007012) (CVE-2021-26427) (CVE-2021-34453) (CVE-2021-41348) (CVE-2021-41350)Windows

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-32304Security Update For Exchange Server 2013 CU23 (KB5007011) CVE-2021-26427
PATCH-32305Security Update For Exchange Server 2016 CU21 (KB5007012) (CVE-2021-26427) (CVE-2021-34453) (CVE-2021-41348) (CVE-2021-41350)
PATCH-32306Security Update For Exchange Server 2016 CU22 (KB5007012) (CVE-2021-26427) (CVE-2021-34453) (CVE-2021-41348) (CVE-2021-41350)
PATCH-32307Security Update For Exchange Server 2019 CU10 (KB5007012) (CVE-2021-26427) (CVE-2021-34453) (CVE-2021-41348) (CVE-2021-41350)
PATCH-32308Security Update For Exchange Server 2019 CU11 (KB5007012) (CVE-2021-26427) (CVE-2021-34453) (CVE-2021-41348) (CVE-2021-41350)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234