<< Back
CVE Number Vulnerability Product Severity Date
CVE-2022-21846 Microsoft Exchange Server Remote Code Execution Vulnerability Microsoft Exchange Server 2019 Critical 17-01-2022

Technical Information

Brief overview of the risk:

A Remote Code Execution vulnerability in Microsoft Exchange Server which is restricted to logically adjacent topology, this means that an attacker needs to gain an initial foothold on the network before exploiting this vulnerability. An attacker who successfully exploited the vulnerability could execute arbitrary code on the host machine in the context of the logged on user.

Further information on this vulnerability is available at : CVE-2022-21846

Affected Software

Microsoft Exchange Server 2016 Cumulative Update 22
Microsoft Exchange Server 2019 Cumulative Update 11
Microsoft Exchange Server 2013 Cumulative Update 23
Microsoft Exchange Server 2016 Cumulative Update 21
Microsoft Exchange Server 2019 Cumulative Update 10