Security services, software licences and managed support from one accountable partner.

← All vulnerabilities

Not yet scored Actively exploited Used in ransomware

CVE-2021-42321

Microsoft Exchange Server Remote Code Execution Vulnerability

Description

An authenticated attacker could leverage improper validation in cmdlet arguments within Microsoft Exchange and perform remote code execution.

Recommended action

Apply updates per vendor instructions.

CISA remediation due date for U.S. federal agencies: 1 Dec 2021.

Collected automatically from public sources. Verify affected versions and fixes in the vendor's notice before acting.