CVE-2021-31196 is a vulnerability in Microsoft Exchange Server
Published on July 14, 2021
Microsoft Exchange Server Remote Code Execution Vulnerability
Known Exploited Vulnerability
This Microsoft Exchange Server Information Disclosure Vulnerability is part of CISA's list of Known Exploited Vulnerabilities. Microsoft Exchange Server contains an information disclosure vulnerability that allows for remote code execution.
The following remediation steps are recommended / required by September 11, 2024: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Vulnerability Analysis
Products Associated with CVE-2021-31196
You can be notified by stack.watch whenever vulnerabilities like CVE-2021-31196 are published in these products:
What versions of Exchange Server are vulnerable to CVE-2021-31196?
-
Microsoft Exchange Server
Version 2013
cumulative_update_23
-
Microsoft Exchange Server
Version 2016
cumulative_update_20
-
Microsoft Exchange Server
Version 2019
cumulative_update_9
-
Microsoft Exchange Server
Version 2016
cumulative_update_21
-
Microsoft Exchange Server
Version 2019
cumulative_update_10