{"schema_version":"2","view":"grouped","data":[{"id":3647,"cve_ids":["CVE-2021-26857"],"payload":{"kind":"advisory","title":"Microsoft Exchange Server Remote Code Execution Vulnerability","summary":"Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-26857","products":[{"name":{"value":"Exchange Server","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-26857","aliases":["CVE-2021-26857"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-502"],"cveID":"CVE-2021-26857","notes":"Reference CISA's ED 21-02 (https://www.cisa.gov/news-events/directives/ed-21-02-mitigate-microsoft-exchange-premises-product-vulnerabilities) for further guidance and requirements. Note: The due date for addressing this vulnerability aligns with the requirements outlined in ED 21-02. https://nvd.nist.gov/vuln/detail/CVE-2021-26857","dueDate":"2022-05-03","product":"Exchange Server","dateAdded":"2021-11-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain.","vulnerabilityName":"Microsoft Exchange Server Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2021-26857","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:ac606f36-fb71-49a1-825b-026ca4a3a4b4","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-26857","advisory_id":"ac606f36-fb71-49a1-825b-026ca4a3a4b4","event_types":["advisory"],"published_at":"2026-10-24T21:39:23.044518+00:00","technologies":["core-kev","exchange-server"],"context_update":false,"extraction_method":"structured","source_published_at":"2021-11-03T00:00:00+00:00","detail_url":"/advisories/advisory%3Aac606f36-fb71-49a1-825b-026ca4a3a4b4","group":{"id":"advisory:ac606f36-fb71-49a1-825b-026ca4a3a4b4","revision":1,"primary_event_id":3664,"change":"published","superseded_by":[],"changed":{"id":3664,"cve_ids":["CVE-2021-26857"],"payload":{"kind":"advisory","title":"Microsoft Exchange Server Remote Code Execution Vulnerability","summary":"Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-26857","products":[{"name":{"value":"Exchange Server","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-26857","aliases":["CVE-2021-26857"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-502"],"cveID":"CVE-2021-26857","notes":"Reference CISA's ED 21-02 (https://www.cisa.gov/news-events/directives/ed-21-02-mitigate-microsoft-exchange-premises-product-vulnerabilities) for further guidance and requirements. Note: The due date for addressing this vulnerability aligns with the requirements outlined in ED 21-02. https://nvd.nist.gov/vuln/detail/CVE-2021-26857","dueDate":"2022-05-03","product":"Exchange Server","dateAdded":"2021-11-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain.","vulnerabilityName":"Microsoft Exchange Server Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2021-26857","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:ac606f36-fb71-49a1-825b-026ca4a3a4b4","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-26857","advisory_id":"ac606f36-fb71-49a1-825b-026ca4a3a4b4","event_types":["advisory"],"published_at":"2026-10-24T21:39:23.044518+00:00","technologies":["core-kev","exchange-server"],"context_update":false,"extraction_method":"structured","source_published_at":"2021-11-03T00:00:00+00:00","detail_url":"/events/3664"},"members":[{"id":3664,"cve_ids":["CVE-2021-26857"],"payload":{"kind":"advisory","title":"Microsoft Exchange Server Remote Code Execution Vulnerability","summary":"Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-26857","products":[{"name":{"value":"Exchange Server","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-26857","aliases":["CVE-2021-26857"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-502"],"cveID":"CVE-2021-26857","notes":"Reference CISA's ED 21-02 (https://www.cisa.gov/news-events/directives/ed-21-02-mitigate-microsoft-exchange-premises-product-vulnerabilities) for further guidance and requirements. Note: The due date for addressing this vulnerability aligns with the requirements outlined in ED 21-02. https://nvd.nist.gov/vuln/detail/CVE-2021-26857","dueDate":"2022-05-03","product":"Exchange Server","dateAdded":"2021-11-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain.","vulnerabilityName":"Microsoft Exchange Server Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2021-26857","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:ac606f36-fb71-49a1-825b-026ca4a3a4b4","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-26857","advisory_id":"ac606f36-fb71-49a1-825b-026ca4a3a4b4","event_types":["advisory"],"published_at":"2026-10-24T21:39:23.044518+00:00","technologies":["core-kev","exchange-server"],"context_update":false,"extraction_method":"structured","source_published_at":"2021-11-03T00:00:00+00:00","detail_url":"/events/3664"}]}},{"id":3639,"cve_ids":["CVE-2021-27065"],"payload":{"kind":"advisory","title":"Microsoft Exchange Server Remote Code Execution Vulnerability","summary":"Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-27065","products":[{"name":{"value":"Exchange Server","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-27065","aliases":["CVE-2021-27065"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-39"],"cveID":"CVE-2021-27065","notes":"Reference CISA's ED 21-02 (https://www.cisa.gov/news-events/directives/ed-21-02-mitigate-microsoft-exchange-premises-product-vulnerabilities) for further guidance and requirements. Note: The due date for addressing this vulnerability aligns with the requirements outlined in ED 21-02. https://nvd.nist.gov/vuln/detail/CVE-2021-27065","dueDate":"2022-05-03","product":"Exchange Server","dateAdded":"2021-11-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain.","vulnerabilityName":"Microsoft Exchange Server Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2021-27065","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:12e03190-ae5f-4d75-ad8c-38a006e04b12","priority":{"reasons":["linked_severity","known_exploited"],"severity":"high","linked_cves":[{"cve":"CVE-2021-27065","metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":7.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"products":[{"name":{"value":"Microsoft Exchange Server 2013 Cumulative Update 21","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2013 Cumulative Update 22","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2013 Cumulative Update 23","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2013 Service Pack 1","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2016 Cumulative Update 10","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2016 Cumulative Update 11","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2016 Cumulative Update 12","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2016 Cumulative Update 13","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2016 Cumulative Update 14","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2016 Cumulative Update 15","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2016 Cumulative Update 16","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2016 Cumulative Update 17","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2016 Cumulative Update 18","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2016 Cumulative Update 19","evidence":"/containers/cna/affected/13/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2016 Cumulative Update 8","evidence":"/containers/cna/affected/14/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2016 Cumulative Update 9","evidence":"/containers/cna/affected/15/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2019","evidence":"/containers/cna/affected/16/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2019 Cumulative Update 1","evidence":"/containers/cna/affected/17/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2019 Cumulative Update 2","evidence":"/containers/cna/affected/18/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2019 Cumulative Update 3","evidence":"/containers/cna/affected/19/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2019 Cumulative Update 4","evidence":"/containers/cna/affected/20/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2019 Cumulative Update 5","evidence":"/containers/cna/affected/21/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2019 Cumulative Update 6","evidence":"/containers/cna/affected/22/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2019 Cumulative Update 7","evidence":"/containers/cna/affected/23/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2019 Cumulative Update 8","evidence":"/containers/cna/affected/24/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2021-27065","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveID"}],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-27065","advisory_id":"12e03190-ae5f-4d75-ad8c-38a006e04b12","event_types":["advisory"],"published_at":"2026-10-24T21:38:33.243361+00:00","technologies":["core-kev","exchange-server"],"context_update":false,"extraction_method":"structured","source_published_at":"2021-11-03T00:00:00+00:00","detail_url":"/advisories/advisory%3A12e03190-ae5f-4d75-ad8c-38a006e04b12","group":{"id":"advisory:12e03190-ae5f-4d75-ad8c-38a006e04b12","revision":1,"primary_event_id":3656,"change":"published","superseded_by":[],"changed":{"id":3656,"cve_ids":["CVE-2021-27065"],"payload":{"kind":"advisory","title":"Microsoft Exchange Server Remote Code Execution Vulnerability","summary":"Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-27065","products":[{"name":{"value":"Exchange Server","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-27065","aliases":["CVE-2021-27065"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-39"],"cveID":"CVE-2021-27065","notes":"Reference CISA's ED 21-02 (https://www.cisa.gov/news-events/directives/ed-21-02-mitigate-microsoft-exchange-premises-product-vulnerabilities) for further guidance and requirements. Note: The due date for addressing this vulnerability aligns with the requirements outlined in ED 21-02. https://nvd.nist.gov/vuln/detail/CVE-2021-27065","dueDate":"2022-05-03","product":"Exchange Server","dateAdded":"2021-11-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain.","vulnerabilityName":"Microsoft Exchange Server Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2021-27065","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:12e03190-ae5f-4d75-ad8c-38a006e04b12","priority":{"reasons":["linked_severity","known_exploited"],"severity":"high","linked_cves":[{"cve":"CVE-2021-27065","metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":7.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"products":[{"name":{"value":"Microsoft Exchange Server 2013 Cumulative Update 21","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2013 Cumulative Update 22","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2013 Cumulative Update 23","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2013 Service Pack 1","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2016 Cumulative Update 10","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2016 Cumulative Update 11","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2016 Cumulative Update 12","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2016 Cumulative Update 13","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2016 Cumulative Update 14","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2016 Cumulative Update 15","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2016 Cumulative Update 16","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2016 Cumulative Update 17","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2016 Cumulative Update 18","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2016 Cumulative Update 19","evidence":"/containers/cna/affected/13/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2016 Cumulative Update 8","evidence":"/containers/cna/affected/14/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2016 Cumulative Update 9","evidence":"/containers/cna/affected/15/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2019","evidence":"/containers/cna/affected/16/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2019 Cumulative Update 1","evidence":"/containers/cna/affected/17/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2019 Cumulative Update 2","evidence":"/containers/cna/affected/18/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2019 Cumulative Update 3","evidence":"/containers/cna/affected/19/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2019 Cumulative Update 4","evidence":"/containers/cna/affected/20/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2019 Cumulative Update 5","evidence":"/containers/cna/affected/21/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2019 Cumulative Update 6","evidence":"/containers/cna/affected/22/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2019 Cumulative Update 7","evidence":"/containers/cna/affected/23/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2019 Cumulative Update 8","evidence":"/containers/cna/affected/24/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2021-27065","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveID"}],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-27065","advisory_id":"12e03190-ae5f-4d75-ad8c-38a006e04b12","event_types":["advisory"],"published_at":"2026-10-24T21:38:33.243361+00:00","technologies":["core-kev","exchange-server"],"context_update":false,"extraction_method":"structured","source_published_at":"2021-11-03T00:00:00+00:00","detail_url":"/events/3656"},"members":[{"id":3656,"cve_ids":["CVE-2021-27065"],"payload":{"kind":"advisory","title":"Microsoft Exchange Server Remote Code Execution Vulnerability","summary":"Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-27065","products":[{"name":{"value":"Exchange Server","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-27065","aliases":["CVE-2021-27065"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-39"],"cveID":"CVE-2021-27065","notes":"Reference CISA's ED 21-02 (https://www.cisa.gov/news-events/directives/ed-21-02-mitigate-microsoft-exchange-premises-product-vulnerabilities) for further guidance and requirements. Note: The due date for addressing this vulnerability aligns with the requirements outlined in ED 21-02. https://nvd.nist.gov/vuln/detail/CVE-2021-27065","dueDate":"2022-05-03","product":"Exchange Server","dateAdded":"2021-11-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain.","vulnerabilityName":"Microsoft Exchange Server Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2021-27065","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:12e03190-ae5f-4d75-ad8c-38a006e04b12","priority":{"reasons":["linked_severity","known_exploited"],"severity":"high","linked_cves":[{"cve":"CVE-2021-27065","metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":7.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"products":[{"name":{"value":"Microsoft Exchange Server 2013 Cumulative Update 21","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2013 Cumulative Update 22","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2013 Cumulative Update 23","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2013 Service Pack 1","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2016 Cumulative Update 10","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2016 Cumulative Update 11","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2016 Cumulative Update 12","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2016 Cumulative Update 13","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2016 Cumulative Update 14","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2016 Cumulative Update 15","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2016 Cumulative Update 16","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2016 Cumulative Update 17","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2016 Cumulative Update 18","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2016 Cumulative Update 19","evidence":"/containers/cna/affected/13/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2016 Cumulative Update 8","evidence":"/containers/cna/affected/14/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2016 Cumulative Update 9","evidence":"/containers/cna/affected/15/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2019","evidence":"/containers/cna/affected/16/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2019 Cumulative Update 1","evidence":"/containers/cna/affected/17/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2019 Cumulative Update 2","evidence":"/containers/cna/affected/18/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2019 Cumulative Update 3","evidence":"/containers/cna/affected/19/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2019 Cumulative Update 4","evidence":"/containers/cna/affected/20/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2019 Cumulative Update 5","evidence":"/containers/cna/affected/21/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2019 Cumulative Update 6","evidence":"/containers/cna/affected/22/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2019 Cumulative Update 7","evidence":"/containers/cna/affected/23/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2019 Cumulative Update 8","evidence":"/containers/cna/affected/24/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2021-27065","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveID"}],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-27065","advisory_id":"12e03190-ae5f-4d75-ad8c-38a006e04b12","event_types":["advisory"],"published_at":"2026-10-24T21:38:33.243361+00:00","technologies":["core-kev","exchange-server"],"context_update":false,"extraction_method":"structured","source_published_at":"2021-11-03T00:00:00+00:00","detail_url":"/events/3656"}]}},{"id":3638,"cve_ids":["CVE-2021-26858"],"payload":{"kind":"advisory","title":"Microsoft Exchange Server Remote Code Execution Vulnerability","summary":"Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-26858","products":[{"name":{"value":"Exchange Server","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-26858","aliases":["CVE-2021-26858"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2021-26858","notes":"Reference CISA's ED 21-02 (https://www.cisa.gov/news-events/directives/ed-21-02-mitigate-microsoft-exchange-premises-product-vulnerabilities) for further guidance and requirements. Note: The due date for addressing this vulnerability aligns with the requirements outlined in ED 21-02. https://nvd.nist.gov/vuln/detail/CVE-2021-26858","dueDate":"2022-05-03","product":"Exchange Server","dateAdded":"2021-11-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain.","vulnerabilityName":"Microsoft Exchange Server Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2021-26858","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:d72d25e6-82b3-4acc-8bc2-16ad62549435","priority":{"reasons":["linked_severity","known_exploited"],"severity":"high","linked_cves":[{"cve":"CVE-2021-26858","metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":7.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"products":[{"name":{"value":"Microsoft Exchange Server 2013 Cumulative Update 21","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2013 Cumulative Update 22","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2013 Cumulative Update 23","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2016 Cumulative Update 10","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2016 Cumulative Update 11","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2016 Cumulative Update 12","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2016 Cumulative Update 13","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2016 Cumulative Update 14","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2016 Cumulative Update 15","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2016 Cumulative Update 16","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2016 Cumulative Update 17","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2016 Cumulative Update 18","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2016 Cumulative Update 19","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2016 Cumulative Update 8","evidence":"/containers/cna/affected/13/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2016 Cumulative Update 9","evidence":"/containers/cna/affected/14/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2019","evidence":"/containers/cna/affected/15/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2019 Cumulative Update 1","evidence":"/containers/cna/affected/16/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2019 Cumulative Update 2","evidence":"/containers/cna/affected/17/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2019 Cumulative Update 3","evidence":"/containers/cna/affected/18/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2019 Cumulative Update 4","evidence":"/containers/cna/affected/19/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2019 Cumulative Update 5","evidence":"/containers/cna/affected/20/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2019 Cumulative Update 6","evidence":"/containers/cna/affected/21/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2019 Cumulative Update 7","evidence":"/containers/cna/affected/22/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2019 Cumulative Update 8","evidence":"/containers/cna/affected/23/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2021-26858","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveID"}],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-26858","advisory_id":"d72d25e6-82b3-4acc-8bc2-16ad62549435","event_types":["advisory"],"published_at":"2026-10-24T21:38:32.669635+00:00","technologies":["core-kev","exchange-server"],"context_update":false,"extraction_method":"structured","source_published_at":"2021-11-03T00:00:00+00:00","detail_url":"/advisories/advisory%3Ad72d25e6-82b3-4acc-8bc2-16ad62549435","group":{"id":"advisory:d72d25e6-82b3-4acc-8bc2-16ad62549435","revision":1,"primary_event_id":3655,"change":"published","superseded_by":[],"changed":{"id":3655,"cve_ids":["CVE-2021-26858"],"payload":{"kind":"advisory","title":"Microsoft Exchange Server Remote Code Execution Vulnerability","summary":"Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-26858","products":[{"name":{"value":"Exchange Server","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-26858","aliases":["CVE-2021-26858"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2021-26858","notes":"Reference CISA's ED 21-02 (https://www.cisa.gov/news-events/directives/ed-21-02-mitigate-microsoft-exchange-premises-product-vulnerabilities) for further guidance and requirements. Note: The due date for addressing this vulnerability aligns with the requirements outlined in ED 21-02. https://nvd.nist.gov/vuln/detail/CVE-2021-26858","dueDate":"2022-05-03","product":"Exchange Server","dateAdded":"2021-11-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain.","vulnerabilityName":"Microsoft Exchange Server Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2021-26858","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:d72d25e6-82b3-4acc-8bc2-16ad62549435","priority":{"reasons":["linked_severity","known_exploited"],"severity":"high","linked_cves":[{"cve":"CVE-2021-26858","metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":7.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"products":[{"name":{"value":"Microsoft Exchange Server 2013 Cumulative Update 21","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2013 Cumulative Update 22","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2013 Cumulative Update 23","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2016 Cumulative Update 10","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2016 Cumulative Update 11","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2016 Cumulative Update 12","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2016 Cumulative Update 13","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2016 Cumulative Update 14","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2016 Cumulative Update 15","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2016 Cumulative Update 16","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2016 Cumulative Update 17","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2016 Cumulative Update 18","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2016 Cumulative Update 19","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2016 Cumulative Update 8","evidence":"/containers/cna/affected/13/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2016 Cumulative Update 9","evidence":"/containers/cna/affected/14/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2019","evidence":"/containers/cna/affected/15/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2019 Cumulative Update 1","evidence":"/containers/cna/affected/16/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2019 Cumulative Update 2","evidence":"/containers/cna/affected/17/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2019 Cumulative Update 3","evidence":"/containers/cna/affected/18/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2019 Cumulative Update 4","evidence":"/containers/cna/affected/19/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2019 Cumulative Update 5","evidence":"/containers/cna/affected/20/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2019 Cumulative Update 6","evidence":"/containers/cna/affected/21/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2019 Cumulative Update 7","evidence":"/containers/cna/affected/22/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2019 Cumulative Update 8","evidence":"/containers/cna/affected/23/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2021-26858","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveID"}],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-26858","advisory_id":"d72d25e6-82b3-4acc-8bc2-16ad62549435","event_types":["advisory"],"published_at":"2026-10-24T21:38:32.669635+00:00","technologies":["core-kev","exchange-server"],"context_update":false,"extraction_method":"structured","source_published_at":"2021-11-03T00:00:00+00:00","detail_url":"/events/3655"},"members":[{"id":3655,"cve_ids":["CVE-2021-26858"],"payload":{"kind":"advisory","title":"Microsoft Exchange Server Remote Code Execution Vulnerability","summary":"Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-26858","products":[{"name":{"value":"Exchange Server","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-26858","aliases":["CVE-2021-26858"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2021-26858","notes":"Reference CISA's ED 21-02 (https://www.cisa.gov/news-events/directives/ed-21-02-mitigate-microsoft-exchange-premises-product-vulnerabilities) for further guidance and requirements. Note: The due date for addressing this vulnerability aligns with the requirements outlined in ED 21-02. https://nvd.nist.gov/vuln/detail/CVE-2021-26858","dueDate":"2022-05-03","product":"Exchange Server","dateAdded":"2021-11-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain.","vulnerabilityName":"Microsoft Exchange Server Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2021-26858","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:d72d25e6-82b3-4acc-8bc2-16ad62549435","priority":{"reasons":["linked_severity","known_exploited"],"severity":"high","linked_cves":[{"cve":"CVE-2021-26858","metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":7.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"products":[{"name":{"value":"Microsoft Exchange Server 2013 Cumulative Update 21","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2013 Cumulative Update 22","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2013 Cumulative Update 23","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2016 Cumulative Update 10","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2016 Cumulative Update 11","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2016 Cumulative Update 12","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2016 Cumulative Update 13","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2016 Cumulative Update 14","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2016 Cumulative Update 15","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2016 Cumulative Update 16","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2016 Cumulative Update 17","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2016 Cumulative Update 18","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2016 Cumulative Update 19","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2016 Cumulative Update 8","evidence":"/containers/cna/affected/13/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2016 Cumulative Update 9","evidence":"/containers/cna/affected/14/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2019","evidence":"/containers/cna/affected/15/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2019 Cumulative Update 1","evidence":"/containers/cna/affected/16/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2019 Cumulative Update 2","evidence":"/containers/cna/affected/17/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2019 Cumulative Update 3","evidence":"/containers/cna/affected/18/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2019 Cumulative Update 4","evidence":"/containers/cna/affected/19/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2019 Cumulative Update 5","evidence":"/containers/cna/affected/20/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2019 Cumulative Update 6","evidence":"/containers/cna/affected/21/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2019 Cumulative Update 7","evidence":"/containers/cna/affected/22/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Exchange Server 2019 Cumulative Update 8","evidence":"/containers/cna/affected/23/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2021-26858","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveID"}],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-26858","advisory_id":"d72d25e6-82b3-4acc-8bc2-16ad62549435","event_types":["advisory"],"published_at":"2026-10-24T21:38:32.669635+00:00","technologies":["core-kev","exchange-server"],"context_update":false,"extraction_method":"structured","source_published_at":"2021-11-03T00:00:00+00:00","detail_url":"/events/3655"}]}},{"id":3637,"cve_ids":["CVE-2021-26855"],"payload":{"kind":"advisory","title":"Microsoft Exchange Server Remote Code Execution Vulnerability","summary":"Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-26855","products":[{"name":{"value":"Exchange Server","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-26855","aliases":["CVE-2021-26855"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-918"],"cveID":"CVE-2021-26855","notes":"Reference CISA's ED 21-02 (https://www.cisa.gov/news-events/directives/ed-21-02-mitigate-microsoft-exchange-premises-product-vulnerabilities) for further guidance and requirements. Note: The due date for addressing this vulnerability aligns with the requirements outlined in ED 21-02. https://nvd.nist.gov/vuln/detail/CVE-2021-26855","dueDate":"2022-05-03","product":"Exchange Server","dateAdded":"2021-11-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain.","vulnerabilityName":"Microsoft Exchange Server Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2021-26855","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:a24e52ac-99d0-4ddb-9402-be818e6c683e","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-26855","advisory_id":"a24e52ac-99d0-4ddb-9402-be818e6c683e","event_types":["advisory"],"published_at":"2026-10-24T21:38:32.095878+00:00","technologies":["core-kev","exchange-server"],"context_update":false,"extraction_method":"structured","source_published_at":"2021-11-03T00:00:00+00:00","detail_url":"/advisories/advisory%3Aa24e52ac-99d0-4ddb-9402-be818e6c683e","group":{"id":"advisory:a24e52ac-99d0-4ddb-9402-be818e6c683e","revision":1,"primary_event_id":3654,"change":"published","superseded_by":[],"changed":{"id":3654,"cve_ids":["CVE-2021-26855"],"payload":{"kind":"advisory","title":"Microsoft Exchange Server Remote Code Execution Vulnerability","summary":"Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-26855","products":[{"name":{"value":"Exchange Server","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-26855","aliases":["CVE-2021-26855"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-918"],"cveID":"CVE-2021-26855","notes":"Reference CISA's ED 21-02 (https://www.cisa.gov/news-events/directives/ed-21-02-mitigate-microsoft-exchange-premises-product-vulnerabilities) for further guidance and requirements. Note: The due date for addressing this vulnerability aligns with the requirements outlined in ED 21-02. https://nvd.nist.gov/vuln/detail/CVE-2021-26855","dueDate":"2022-05-03","product":"Exchange Server","dateAdded":"2021-11-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain.","vulnerabilityName":"Microsoft Exchange Server Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2021-26855","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:a24e52ac-99d0-4ddb-9402-be818e6c683e","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-26855","advisory_id":"a24e52ac-99d0-4ddb-9402-be818e6c683e","event_types":["advisory"],"published_at":"2026-10-24T21:38:32.095878+00:00","technologies":["core-kev","exchange-server"],"context_update":false,"extraction_method":"structured","source_published_at":"2021-11-03T00:00:00+00:00","detail_url":"/events/3654"},"members":[{"id":3654,"cve_ids":["CVE-2021-26855"],"payload":{"kind":"advisory","title":"Microsoft Exchange Server Remote Code Execution Vulnerability","summary":"Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-26855","products":[{"name":{"value":"Exchange Server","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-26855","aliases":["CVE-2021-26855"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-918"],"cveID":"CVE-2021-26855","notes":"Reference CISA's ED 21-02 (https://www.cisa.gov/news-events/directives/ed-21-02-mitigate-microsoft-exchange-premises-product-vulnerabilities) for further guidance and requirements. Note: The due date for addressing this vulnerability aligns with the requirements outlined in ED 21-02. https://nvd.nist.gov/vuln/detail/CVE-2021-26855","dueDate":"2022-05-03","product":"Exchange Server","dateAdded":"2021-11-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain.","vulnerabilityName":"Microsoft Exchange Server Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2021-26855","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:a24e52ac-99d0-4ddb-9402-be818e6c683e","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-26855","advisory_id":"a24e52ac-99d0-4ddb-9402-be818e6c683e","event_types":["advisory"],"published_at":"2026-10-24T21:38:32.095878+00:00","technologies":["core-kev","exchange-server"],"context_update":false,"extraction_method":"structured","source_published_at":"2021-11-03T00:00:00+00:00","detail_url":"/events/3654"}]}},{"id":3608,"cve_ids":["CVE-2021-31207"],"payload":{"kind":"advisory","title":"Microsoft Exchange Server Security Feature Bypass Vulnerability","summary":"Microsoft Exchange Server contains an unspecified vulnerability that allows for security feature bypass. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-31207","products":[{"name":{"value":"Exchange Server","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-31207","aliases":["CVE-2021-31207"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-20","CWE-434"],"cveID":"CVE-2021-31207","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-31207","dueDate":"2021-11-17","product":"Exchange Server","dateAdded":"2021-11-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Exchange Server contains an unspecified vulnerability that allows for security feature bypass.","vulnerabilityName":"Microsoft Exchange Server Security Feature Bypass Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2021-31207","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:56fc1ee1-f0b0-4967-a9e7-9a954b3e6836","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-31207","advisory_id":"56fc1ee1-f0b0-4967-a9e7-9a954b3e6836","event_types":["advisory"],"published_at":"2026-10-24T21:38:14.512042+00:00","technologies":["core-kev","exchange-server"],"context_update":false,"extraction_method":"structured","source_published_at":"2021-11-03T00:00:00+00:00","detail_url":"/advisories/advisory%3A56fc1ee1-f0b0-4967-a9e7-9a954b3e6836","group":{"id":"advisory:56fc1ee1-f0b0-4967-a9e7-9a954b3e6836","revision":1,"primary_event_id":3625,"change":"published","superseded_by":[],"changed":{"id":3625,"cve_ids":["CVE-2021-31207"],"payload":{"kind":"advisory","title":"Microsoft Exchange Server Security Feature Bypass Vulnerability","summary":"Microsoft Exchange Server contains an unspecified vulnerability that allows for security feature bypass. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-31207","products":[{"name":{"value":"Exchange Server","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-31207","aliases":["CVE-2021-31207"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-20","CWE-434"],"cveID":"CVE-2021-31207","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-31207","dueDate":"2021-11-17","product":"Exchange Server","dateAdded":"2021-11-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Exchange Server contains an unspecified vulnerability that allows for security feature bypass.","vulnerabilityName":"Microsoft Exchange Server Security Feature Bypass Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2021-31207","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:56fc1ee1-f0b0-4967-a9e7-9a954b3e6836","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-31207","advisory_id":"56fc1ee1-f0b0-4967-a9e7-9a954b3e6836","event_types":["advisory"],"published_at":"2026-10-24T21:38:14.512042+00:00","technologies":["core-kev","exchange-server"],"context_update":false,"extraction_method":"structured","source_published_at":"2021-11-03T00:00:00+00:00","detail_url":"/events/3625"},"members":[{"id":3625,"cve_ids":["CVE-2021-31207"],"payload":{"kind":"advisory","title":"Microsoft Exchange Server Security Feature Bypass Vulnerability","summary":"Microsoft Exchange Server contains an unspecified vulnerability that allows for security feature bypass. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-31207","products":[{"name":{"value":"Exchange Server","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-31207","aliases":["CVE-2021-31207"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-20","CWE-434"],"cveID":"CVE-2021-31207","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-31207","dueDate":"2021-11-17","product":"Exchange Server","dateAdded":"2021-11-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Exchange Server contains an unspecified vulnerability that allows for security feature bypass.","vulnerabilityName":"Microsoft Exchange Server Security Feature Bypass Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2021-31207","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:56fc1ee1-f0b0-4967-a9e7-9a954b3e6836","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-31207","advisory_id":"56fc1ee1-f0b0-4967-a9e7-9a954b3e6836","event_types":["advisory"],"published_at":"2026-10-24T21:38:14.512042+00:00","technologies":["core-kev","exchange-server"],"context_update":false,"extraction_method":"structured","source_published_at":"2021-11-03T00:00:00+00:00","detail_url":"/events/3625"}]}},{"id":3606,"cve_ids":["CVE-2021-34473"],"payload":{"kind":"advisory","title":"Microsoft Exchange Server Remote Code Execution Vulnerability","summary":"Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-34473","products":[{"name":{"value":"Exchange Server","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-34473","aliases":["CVE-2021-34473"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-918"],"cveID":"CVE-2021-34473","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-34473","dueDate":"2021-11-17","product":"Exchange Server","dateAdded":"2021-11-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution.","vulnerabilityName":"Microsoft Exchange Server Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2021-34473","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:71b99edf-9393-478c-8de5-235904bcc19e","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-34473","advisory_id":"71b99edf-9393-478c-8de5-235904bcc19e","event_types":["advisory"],"published_at":"2026-10-24T21:38:13.356238+00:00","technologies":["core-kev","exchange-server"],"context_update":false,"extraction_method":"structured","source_published_at":"2021-11-03T00:00:00+00:00","detail_url":"/advisories/advisory%3A71b99edf-9393-478c-8de5-235904bcc19e","group":{"id":"advisory:71b99edf-9393-478c-8de5-235904bcc19e","revision":1,"primary_event_id":3623,"change":"published","superseded_by":[],"changed":{"id":3623,"cve_ids":["CVE-2021-34473"],"payload":{"kind":"advisory","title":"Microsoft Exchange Server Remote Code Execution Vulnerability","summary":"Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-34473","products":[{"name":{"value":"Exchange Server","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-34473","aliases":["CVE-2021-34473"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-918"],"cveID":"CVE-2021-34473","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-34473","dueDate":"2021-11-17","product":"Exchange Server","dateAdded":"2021-11-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution.","vulnerabilityName":"Microsoft Exchange Server Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2021-34473","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:71b99edf-9393-478c-8de5-235904bcc19e","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-34473","advisory_id":"71b99edf-9393-478c-8de5-235904bcc19e","event_types":["advisory"],"published_at":"2026-10-24T21:38:13.356238+00:00","technologies":["core-kev","exchange-server"],"context_update":false,"extraction_method":"structured","source_published_at":"2021-11-03T00:00:00+00:00","detail_url":"/events/3623"},"members":[{"id":3623,"cve_ids":["CVE-2021-34473"],"payload":{"kind":"advisory","title":"Microsoft Exchange Server Remote Code Execution Vulnerability","summary":"Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-34473","products":[{"name":{"value":"Exchange Server","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-34473","aliases":["CVE-2021-34473"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-918"],"cveID":"CVE-2021-34473","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-34473","dueDate":"2021-11-17","product":"Exchange Server","dateAdded":"2021-11-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution.","vulnerabilityName":"Microsoft Exchange Server Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2021-34473","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:71b99edf-9393-478c-8de5-235904bcc19e","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-34473","advisory_id":"71b99edf-9393-478c-8de5-235904bcc19e","event_types":["advisory"],"published_at":"2026-10-24T21:38:13.356238+00:00","technologies":["core-kev","exchange-server"],"context_update":false,"extraction_method":"structured","source_published_at":"2021-11-03T00:00:00+00:00","detail_url":"/events/3623"}]}},{"id":3600,"cve_ids":["CVE-2020-0688"],"payload":{"kind":"advisory","title":"Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability","summary":"Microsoft Exchange Server Validation Key fails to properly create unique keys at install time, allowing for remote code execution. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2020-0688","products":[{"name":{"value":"Exchange Server","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2020-0688","aliases":["CVE-2020-0688"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-287"],"cveID":"CVE-2020-0688","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-0688","dueDate":"2022-05-03","product":"Exchange Server","dateAdded":"2021-11-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Exchange Server Validation Key fails to properly create unique keys at install time, allowing for remote code execution.","vulnerabilityName":"Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2020-0688","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:a3db64b0-9755-4c4a-b5f3-3b3a82dbaae4","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-0688","advisory_id":"a3db64b0-9755-4c4a-b5f3-3b3a82dbaae4","event_types":["advisory"],"published_at":"2026-10-24T21:38:09.857353+00:00","technologies":["core-kev","exchange-server"],"context_update":false,"extraction_method":"structured","source_published_at":"2021-11-03T00:00:00+00:00","detail_url":"/advisories/advisory%3Aa3db64b0-9755-4c4a-b5f3-3b3a82dbaae4","group":{"id":"advisory:a3db64b0-9755-4c4a-b5f3-3b3a82dbaae4","revision":1,"primary_event_id":3617,"change":"published","superseded_by":[],"changed":{"id":3617,"cve_ids":["CVE-2020-0688"],"payload":{"kind":"advisory","title":"Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability","summary":"Microsoft Exchange Server Validation Key fails to properly create unique keys at install time, allowing for remote code execution. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2020-0688","products":[{"name":{"value":"Exchange Server","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2020-0688","aliases":["CVE-2020-0688"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-287"],"cveID":"CVE-2020-0688","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-0688","dueDate":"2022-05-03","product":"Exchange Server","dateAdded":"2021-11-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Exchange Server Validation Key fails to properly create unique keys at install time, allowing for remote code execution.","vulnerabilityName":"Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2020-0688","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:a3db64b0-9755-4c4a-b5f3-3b3a82dbaae4","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-0688","advisory_id":"a3db64b0-9755-4c4a-b5f3-3b3a82dbaae4","event_types":["advisory"],"published_at":"2026-10-24T21:38:09.857353+00:00","technologies":["core-kev","exchange-server"],"context_update":false,"extraction_method":"structured","source_published_at":"2021-11-03T00:00:00+00:00","detail_url":"/events/3617"},"members":[{"id":3617,"cve_ids":["CVE-2020-0688"],"payload":{"kind":"advisory","title":"Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability","summary":"Microsoft Exchange Server Validation Key fails to properly create unique keys at install time, allowing for remote code execution. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2020-0688","products":[{"name":{"value":"Exchange Server","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2020-0688","aliases":["CVE-2020-0688"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-287"],"cveID":"CVE-2020-0688","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-0688","dueDate":"2022-05-03","product":"Exchange Server","dateAdded":"2021-11-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Exchange Server Validation Key fails to properly create unique keys at install time, allowing for remote code execution.","vulnerabilityName":"Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2020-0688","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:a3db64b0-9755-4c4a-b5f3-3b3a82dbaae4","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-0688","advisory_id":"a3db64b0-9755-4c4a-b5f3-3b3a82dbaae4","event_types":["advisory"],"published_at":"2026-10-24T21:38:09.857353+00:00","technologies":["core-kev","exchange-server"],"context_update":false,"extraction_method":"structured","source_published_at":"2021-11-03T00:00:00+00:00","detail_url":"/events/3617"}]}},{"id":3596,"cve_ids":["CVE-2021-34523"],"payload":{"kind":"advisory","title":"Microsoft Exchange Server Privilege Escalation Vulnerability","summary":"Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-34523","products":[{"name":{"value":"Exchange Server","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-34523","aliases":["CVE-2021-34523"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-287"],"cveID":"CVE-2021-34523","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-34523","dueDate":"2021-11-17","product":"Exchange Server","dateAdded":"2021-11-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation.","vulnerabilityName":"Microsoft Exchange Server Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2021-34523","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:bc5fe31c-cd0c-47fc-82d1-5950fc2c31d6","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-34523","advisory_id":"bc5fe31c-cd0c-47fc-82d1-5950fc2c31d6","event_types":["advisory"],"published_at":"2026-10-24T21:38:07.568697+00:00","technologies":["core-kev","exchange-server"],"context_update":false,"extraction_method":"structured","source_published_at":"2021-11-03T00:00:00+00:00","detail_url":"/advisories/advisory%3Abc5fe31c-cd0c-47fc-82d1-5950fc2c31d6","group":{"id":"advisory:bc5fe31c-cd0c-47fc-82d1-5950fc2c31d6","revision":1,"primary_event_id":3613,"change":"published","superseded_by":[],"changed":{"id":3613,"cve_ids":["CVE-2021-34523"],"payload":{"kind":"advisory","title":"Microsoft Exchange Server Privilege Escalation Vulnerability","summary":"Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-34523","products":[{"name":{"value":"Exchange Server","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-34523","aliases":["CVE-2021-34523"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-287"],"cveID":"CVE-2021-34523","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-34523","dueDate":"2021-11-17","product":"Exchange Server","dateAdded":"2021-11-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation.","vulnerabilityName":"Microsoft Exchange Server Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2021-34523","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:bc5fe31c-cd0c-47fc-82d1-5950fc2c31d6","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-34523","advisory_id":"bc5fe31c-cd0c-47fc-82d1-5950fc2c31d6","event_types":["advisory"],"published_at":"2026-10-24T21:38:07.568697+00:00","technologies":["core-kev","exchange-server"],"context_update":false,"extraction_method":"structured","source_published_at":"2021-11-03T00:00:00+00:00","detail_url":"/events/3613"},"members":[{"id":3613,"cve_ids":["CVE-2021-34523"],"payload":{"kind":"advisory","title":"Microsoft Exchange Server Privilege Escalation Vulnerability","summary":"Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-34523","products":[{"name":{"value":"Exchange Server","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-34523","aliases":["CVE-2021-34523"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-287"],"cveID":"CVE-2021-34523","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-34523","dueDate":"2021-11-17","product":"Exchange Server","dateAdded":"2021-11-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation.","vulnerabilityName":"Microsoft Exchange Server Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2021-34523","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:bc5fe31c-cd0c-47fc-82d1-5950fc2c31d6","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-34523","advisory_id":"bc5fe31c-cd0c-47fc-82d1-5950fc2c31d6","event_types":["advisory"],"published_at":"2026-10-24T21:38:07.568697+00:00","technologies":["core-kev","exchange-server"],"context_update":false,"extraction_method":"structured","source_published_at":"2021-11-03T00:00:00+00:00","detail_url":"/events/3613"}]}},{"id":3592,"cve_ids":["CVE-2020-17144"],"payload":{"kind":"advisory","title":"Microsoft Exchange Server Remote Code Execution Vulnerability","summary":"Microsoft Exchange Server improperly validates cmdlet arguments which allow an attacker to perform remote code execution. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2020-17144","products":[{"name":{"value":"Exchange Server","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2020-17144","aliases":["CVE-2020-17144"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-502"],"cveID":"CVE-2020-17144","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-17144","dueDate":"2022-05-03","product":"Exchange Server","dateAdded":"2021-11-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Exchange Server improperly validates cmdlet arguments which allow an attacker to perform remote code execution.","vulnerabilityName":"Microsoft Exchange Server Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2020-17144","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:fe79dce6-89db-4f8a-bede-77bc228b2f5c","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-17144","advisory_id":"fe79dce6-89db-4f8a-bede-77bc228b2f5c","event_types":["advisory"],"published_at":"2026-10-24T21:38:05.311999+00:00","technologies":["core-kev","exchange-server"],"context_update":false,"extraction_method":"structured","source_published_at":"2021-11-03T00:00:00+00:00","detail_url":"/advisories/advisory%3Afe79dce6-89db-4f8a-bede-77bc228b2f5c","group":{"id":"advisory:fe79dce6-89db-4f8a-bede-77bc228b2f5c","revision":1,"primary_event_id":3609,"change":"published","superseded_by":[],"changed":{"id":3609,"cve_ids":["CVE-2020-17144"],"payload":{"kind":"advisory","title":"Microsoft Exchange Server Remote Code Execution Vulnerability","summary":"Microsoft Exchange Server improperly validates cmdlet arguments which allow an attacker to perform remote code execution. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2020-17144","products":[{"name":{"value":"Exchange Server","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2020-17144","aliases":["CVE-2020-17144"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-502"],"cveID":"CVE-2020-17144","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-17144","dueDate":"2022-05-03","product":"Exchange Server","dateAdded":"2021-11-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Exchange Server improperly validates cmdlet arguments which allow an attacker to perform remote code execution.","vulnerabilityName":"Microsoft Exchange Server Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2020-17144","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:fe79dce6-89db-4f8a-bede-77bc228b2f5c","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-17144","advisory_id":"fe79dce6-89db-4f8a-bede-77bc228b2f5c","event_types":["advisory"],"published_at":"2026-10-24T21:38:05.311999+00:00","technologies":["core-kev","exchange-server"],"context_update":false,"extraction_method":"structured","source_published_at":"2021-11-03T00:00:00+00:00","detail_url":"/events/3609"},"members":[{"id":3609,"cve_ids":["CVE-2020-17144"],"payload":{"kind":"advisory","title":"Microsoft Exchange Server Remote Code Execution Vulnerability","summary":"Microsoft Exchange Server improperly validates cmdlet arguments which allow an attacker to perform remote code execution. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2020-17144","products":[{"name":{"value":"Exchange Server","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2020-17144","aliases":["CVE-2020-17144"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-502"],"cveID":"CVE-2020-17144","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-17144","dueDate":"2022-05-03","product":"Exchange Server","dateAdded":"2021-11-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Exchange Server improperly validates cmdlet arguments which allow an attacker to perform remote code execution.","vulnerabilityName":"Microsoft Exchange Server Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2020-17144","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:fe79dce6-89db-4f8a-bede-77bc228b2f5c","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-17144","advisory_id":"fe79dce6-89db-4f8a-bede-77bc228b2f5c","event_types":["advisory"],"published_at":"2026-10-24T21:38:05.311999+00:00","technologies":["core-kev","exchange-server"],"context_update":false,"extraction_method":"structured","source_published_at":"2021-11-03T00:00:00+00:00","detail_url":"/events/3609"}]}},{"id":2917,"cve_ids":["CVE-2021-33766"],"payload":{"kind":"advisory","title":"Microsoft Exchange Server Information Disclosure","summary":"Microsoft Exchange Server contains an information disclosure vulnerability which can allow an unauthenticated attacker to steal email traffic from target. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-33766","products":[{"name":{"value":"Exchange Server","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-33766","aliases":["CVE-2021-33766"],"affected":[],"modified":"2022-01-18T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-287"],"cveID":"CVE-2021-33766","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-33766","dueDate":"2022-02-01","product":"Exchange Server","dateAdded":"2022-01-18","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Exchange Server contains an information disclosure vulnerability which can allow an unauthenticated attacker to steal email traffic from target.","vulnerabilityName":"Microsoft Exchange Server Information Disclosure","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2021-33766","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:6178a42b-a9ec-46c5-a1eb-c0753b308132","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-33766","advisory_id":"6178a42b-a9ec-46c5-a1eb-c0753b308132","event_types":["advisory"],"published_at":"2026-10-24T21:26:28.403876+00:00","technologies":["core-kev","exchange-server"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-01-18T00:00:00+00:00","detail_url":"/advisories/advisory%3A6178a42b-a9ec-46c5-a1eb-c0753b308132","group":{"id":"advisory:6178a42b-a9ec-46c5-a1eb-c0753b308132","revision":1,"primary_event_id":2922,"change":"published","superseded_by":[],"changed":{"id":2922,"cve_ids":["CVE-2021-33766"],"payload":{"kind":"advisory","title":"Microsoft Exchange Server Information Disclosure","summary":"Microsoft Exchange Server contains an information disclosure vulnerability which can allow an unauthenticated attacker to steal email traffic from target. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-33766","products":[{"name":{"value":"Exchange Server","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-33766","aliases":["CVE-2021-33766"],"affected":[],"modified":"2022-01-18T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-287"],"cveID":"CVE-2021-33766","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-33766","dueDate":"2022-02-01","product":"Exchange Server","dateAdded":"2022-01-18","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Exchange Server contains an information disclosure vulnerability which can allow an unauthenticated attacker to steal email traffic from target.","vulnerabilityName":"Microsoft Exchange Server Information Disclosure","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2021-33766","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:6178a42b-a9ec-46c5-a1eb-c0753b308132","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-33766","advisory_id":"6178a42b-a9ec-46c5-a1eb-c0753b308132","event_types":["advisory"],"published_at":"2026-10-24T21:26:28.403876+00:00","technologies":["core-kev","exchange-server"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-01-18T00:00:00+00:00","detail_url":"/events/2922"},"members":[{"id":2922,"cve_ids":["CVE-2021-33766"],"payload":{"kind":"advisory","title":"Microsoft Exchange Server Information Disclosure","summary":"Microsoft Exchange Server contains an information disclosure vulnerability which can allow an unauthenticated attacker to steal email traffic from target. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-33766","products":[{"name":{"value":"Exchange Server","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-33766","aliases":["CVE-2021-33766"],"affected":[],"modified":"2022-01-18T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-287"],"cveID":"CVE-2021-33766","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-33766","dueDate":"2022-02-01","product":"Exchange Server","dateAdded":"2022-01-18","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Exchange Server contains an information disclosure vulnerability which can allow an unauthenticated attacker to steal email traffic from target.","vulnerabilityName":"Microsoft Exchange Server Information Disclosure","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2021-33766","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:6178a42b-a9ec-46c5-a1eb-c0753b308132","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-33766","advisory_id":"6178a42b-a9ec-46c5-a1eb-c0753b308132","event_types":["advisory"],"published_at":"2026-10-24T21:26:28.403876+00:00","technologies":["core-kev","exchange-server"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-01-18T00:00:00+00:00","detail_url":"/events/2922"}]}},{"id":2782,"cve_ids":["CVE-2018-8581"],"payload":{"kind":"advisory","title":"Microsoft Exchange Server Privilege Escalation Vulnerability","summary":"A privilege escalation vulnerability exists in Microsoft Exchange Server. An attacker who successfully exploited this vulnerability could attempt to impersonate any other user of the Exchange server. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2018-8581","products":[{"name":{"value":"Exchange Server","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2018-8581","aliases":["CVE-2018-8581"],"affected":[],"modified":"2022-03-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2018-8581","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-8581","dueDate":"2022-03-17","product":"Exchange Server","dateAdded":"2022-03-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"A privilege escalation vulnerability exists in Microsoft Exchange Server. An attacker who successfully exploited this vulnerability could attempt to impersonate any other user of the Exchange server.","vulnerabilityName":"Microsoft Exchange Server Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2018-8581","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:6c609c13-1167-4b45-a551-ac643f6729ea","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-8581","advisory_id":"6c609c13-1167-4b45-a551-ac643f6729ea","event_types":["advisory"],"published_at":"2026-10-24T21:24:13.03232+00:00","technologies":["core-kev","exchange-server"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-03-03T00:00:00+00:00","detail_url":"/advisories/advisory%3A6c609c13-1167-4b45-a551-ac643f6729ea","group":{"id":"advisory:6c609c13-1167-4b45-a551-ac643f6729ea","revision":1,"primary_event_id":2789,"change":"published","superseded_by":[],"changed":{"id":2789,"cve_ids":["CVE-2018-8581"],"payload":{"kind":"advisory","title":"Microsoft Exchange Server Privilege Escalation Vulnerability","summary":"A privilege escalation vulnerability exists in Microsoft Exchange Server. An attacker who successfully exploited this vulnerability could attempt to impersonate any other user of the Exchange server. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2018-8581","products":[{"name":{"value":"Exchange Server","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2018-8581","aliases":["CVE-2018-8581"],"affected":[],"modified":"2022-03-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2018-8581","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-8581","dueDate":"2022-03-17","product":"Exchange Server","dateAdded":"2022-03-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"A privilege escalation vulnerability exists in Microsoft Exchange Server. An attacker who successfully exploited this vulnerability could attempt to impersonate any other user of the Exchange server.","vulnerabilityName":"Microsoft Exchange Server Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2018-8581","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:6c609c13-1167-4b45-a551-ac643f6729ea","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-8581","advisory_id":"6c609c13-1167-4b45-a551-ac643f6729ea","event_types":["advisory"],"published_at":"2026-10-24T21:24:13.03232+00:00","technologies":["core-kev","exchange-server"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-03-03T00:00:00+00:00","detail_url":"/events/2789"},"members":[{"id":2789,"cve_ids":["CVE-2018-8581"],"payload":{"kind":"advisory","title":"Microsoft Exchange Server Privilege Escalation Vulnerability","summary":"A privilege escalation vulnerability exists in Microsoft Exchange Server. An attacker who successfully exploited this vulnerability could attempt to impersonate any other user of the Exchange server. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2018-8581","products":[{"name":{"value":"Exchange Server","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2018-8581","aliases":["CVE-2018-8581"],"affected":[],"modified":"2022-03-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2018-8581","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-8581","dueDate":"2022-03-17","product":"Exchange Server","dateAdded":"2022-03-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"A privilege escalation vulnerability exists in Microsoft Exchange Server. An attacker who successfully exploited this vulnerability could attempt to impersonate any other user of the Exchange server.","vulnerabilityName":"Microsoft Exchange Server Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2018-8581","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:6c609c13-1167-4b45-a551-ac643f6729ea","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-8581","advisory_id":"6c609c13-1167-4b45-a551-ac643f6729ea","event_types":["advisory"],"published_at":"2026-10-24T21:24:13.03232+00:00","technologies":["core-kev","exchange-server"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-03-03T00:00:00+00:00","detail_url":"/events/2789"}]}},{"id":1436,"cve_ids":["CVE-2022-41040"],"payload":{"kind":"advisory","title":"Microsoft Exchange Server Server-Side Request Forgery Vulnerability","summary":"Microsoft Exchange Server allows for server-side request forgery. Dubbed \"ProxyNotShell,\" this vulnerability is chainable with CVE-2022-41082 which allows for remote code execution. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2022-41040","products":[{"name":{"value":"Exchange Server","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-41040","aliases":["CVE-2022-41040"],"affected":[],"modified":"2022-09-30T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-918"],"cveID":"CVE-2022-41040","notes":"https://msrc-blog.microsoft.com/2022/09/29/customer-guidance-for-reported-zero-day-vulnerabilities-in-microsoft-exchange-server/;  https://nvd.nist.gov/vuln/detail/CVE-2022-41040","dueDate":"2022-10-21","product":"Exchange Server","dateAdded":"2022-09-30","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Exchange Server allows for server-side request forgery. Dubbed \"ProxyNotShell,\" this vulnerability is chainable with CVE-2022-41082 which allows for remote code execution.","vulnerabilityName":"Microsoft Exchange Server Server-Side Request Forgery Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2022-41040","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:32101efb-81cf-4da4-b114-4f74482bcff4","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-41040","advisory_id":"32101efb-81cf-4da4-b114-4f74482bcff4","event_types":["advisory"],"published_at":"2026-10-24T21:02:21.932542+00:00","technologies":["core-kev","exchange-server"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-09-30T00:00:00+00:00","detail_url":"/advisories/advisory%3A32101efb-81cf-4da4-b114-4f74482bcff4","group":{"id":"advisory:32101efb-81cf-4da4-b114-4f74482bcff4","revision":1,"primary_event_id":1423,"change":"published","superseded_by":[],"changed":{"id":1423,"cve_ids":["CVE-2022-41040"],"payload":{"kind":"advisory","title":"Microsoft Exchange Server Server-Side Request Forgery Vulnerability","summary":"Microsoft Exchange Server allows for server-side request forgery. Dubbed \"ProxyNotShell,\" this vulnerability is chainable with CVE-2022-41082 which allows for remote code execution. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2022-41040","products":[{"name":{"value":"Exchange Server","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-41040","aliases":["CVE-2022-41040"],"affected":[],"modified":"2022-09-30T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-918"],"cveID":"CVE-2022-41040","notes":"https://msrc-blog.microsoft.com/2022/09/29/customer-guidance-for-reported-zero-day-vulnerabilities-in-microsoft-exchange-server/;  https://nvd.nist.gov/vuln/detail/CVE-2022-41040","dueDate":"2022-10-21","product":"Exchange Server","dateAdded":"2022-09-30","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Exchange Server allows for server-side request forgery. Dubbed \"ProxyNotShell,\" this vulnerability is chainable with CVE-2022-41082 which allows for remote code execution.","vulnerabilityName":"Microsoft Exchange Server Server-Side Request Forgery Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2022-41040","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:32101efb-81cf-4da4-b114-4f74482bcff4","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-41040","advisory_id":"32101efb-81cf-4da4-b114-4f74482bcff4","event_types":["advisory"],"published_at":"2026-10-24T21:02:21.932542+00:00","technologies":["core-kev","exchange-server"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-09-30T00:00:00+00:00","detail_url":"/events/1423"},"members":[{"id":1423,"cve_ids":["CVE-2022-41040"],"payload":{"kind":"advisory","title":"Microsoft Exchange Server Server-Side Request Forgery Vulnerability","summary":"Microsoft Exchange Server allows for server-side request forgery. Dubbed \"ProxyNotShell,\" this vulnerability is chainable with CVE-2022-41082 which allows for remote code execution. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2022-41040","products":[{"name":{"value":"Exchange Server","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-41040","aliases":["CVE-2022-41040"],"affected":[],"modified":"2022-09-30T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-918"],"cveID":"CVE-2022-41040","notes":"https://msrc-blog.microsoft.com/2022/09/29/customer-guidance-for-reported-zero-day-vulnerabilities-in-microsoft-exchange-server/;  https://nvd.nist.gov/vuln/detail/CVE-2022-41040","dueDate":"2022-10-21","product":"Exchange Server","dateAdded":"2022-09-30","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Exchange Server allows for server-side request forgery. Dubbed \"ProxyNotShell,\" this vulnerability is chainable with CVE-2022-41082 which allows for remote code execution.","vulnerabilityName":"Microsoft Exchange Server Server-Side Request Forgery Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2022-41040","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:32101efb-81cf-4da4-b114-4f74482bcff4","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-41040","advisory_id":"32101efb-81cf-4da4-b114-4f74482bcff4","event_types":["advisory"],"published_at":"2026-10-24T21:02:21.932542+00:00","technologies":["core-kev","exchange-server"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-09-30T00:00:00+00:00","detail_url":"/events/1423"}]}},{"id":1435,"cve_ids":["CVE-2022-41082"],"payload":{"kind":"advisory","title":"Microsoft Exchange Server Remote Code Execution Vulnerability","summary":"Microsoft Exchange Server contains an unspecified vulnerability that allows for authenticated remote code execution. Dubbed \"ProxyNotShell,\" this vulnerability is chainable with CVE-2022-41040 which allows for the remote code execution. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2022-41082","products":[{"name":{"value":"Exchange Server","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-41082","aliases":["CVE-2022-41082"],"affected":[],"modified":"2022-09-30T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-502"],"cveID":"CVE-2022-41082","notes":"https://msrc-blog.microsoft.com/2022/09/29/customer-guidance-for-reported-zero-day-vulnerabilities-in-microsoft-exchange-server/;  https://nvd.nist.gov/vuln/detail/CVE-2022-41082","dueDate":"2022-10-21","product":"Exchange Server","dateAdded":"2022-09-30","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Exchange Server contains an unspecified vulnerability that allows for authenticated remote code execution. Dubbed \"ProxyNotShell,\" this vulnerability is chainable with CVE-2022-41040 which allows for the remote code execution.","vulnerabilityName":"Microsoft Exchange Server Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2022-41082","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:72a5365d-d18e-416f-a08d-cac7c40e7a07","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-41082","advisory_id":"72a5365d-d18e-416f-a08d-cac7c40e7a07","event_types":["advisory"],"published_at":"2026-10-24T21:02:20.731928+00:00","technologies":["core-kev","exchange-server"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-09-30T00:00:00+00:00","detail_url":"/advisories/advisory%3A72a5365d-d18e-416f-a08d-cac7c40e7a07","group":{"id":"advisory:72a5365d-d18e-416f-a08d-cac7c40e7a07","revision":1,"primary_event_id":1422,"change":"published","superseded_by":[],"changed":{"id":1422,"cve_ids":["CVE-2022-41082"],"payload":{"kind":"advisory","title":"Microsoft Exchange Server Remote Code Execution Vulnerability","summary":"Microsoft Exchange Server contains an unspecified vulnerability that allows for authenticated remote code execution. Dubbed \"ProxyNotShell,\" this vulnerability is chainable with CVE-2022-41040 which allows for the remote code execution. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2022-41082","products":[{"name":{"value":"Exchange Server","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-41082","aliases":["CVE-2022-41082"],"affected":[],"modified":"2022-09-30T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-502"],"cveID":"CVE-2022-41082","notes":"https://msrc-blog.microsoft.com/2022/09/29/customer-guidance-for-reported-zero-day-vulnerabilities-in-microsoft-exchange-server/;  https://nvd.nist.gov/vuln/detail/CVE-2022-41082","dueDate":"2022-10-21","product":"Exchange Server","dateAdded":"2022-09-30","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Exchange Server contains an unspecified vulnerability that allows for authenticated remote code execution. Dubbed \"ProxyNotShell,\" this vulnerability is chainable with CVE-2022-41040 which allows for the remote code execution.","vulnerabilityName":"Microsoft Exchange Server Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2022-41082","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:72a5365d-d18e-416f-a08d-cac7c40e7a07","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-41082","advisory_id":"72a5365d-d18e-416f-a08d-cac7c40e7a07","event_types":["advisory"],"published_at":"2026-10-24T21:02:20.731928+00:00","technologies":["core-kev","exchange-server"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-09-30T00:00:00+00:00","detail_url":"/events/1422"},"members":[{"id":1422,"cve_ids":["CVE-2022-41082"],"payload":{"kind":"advisory","title":"Microsoft Exchange Server Remote Code Execution Vulnerability","summary":"Microsoft Exchange Server contains an unspecified vulnerability that allows for authenticated remote code execution. Dubbed \"ProxyNotShell,\" this vulnerability is chainable with CVE-2022-41040 which allows for the remote code execution. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2022-41082","products":[{"name":{"value":"Exchange Server","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-41082","aliases":["CVE-2022-41082"],"affected":[],"modified":"2022-09-30T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-502"],"cveID":"CVE-2022-41082","notes":"https://msrc-blog.microsoft.com/2022/09/29/customer-guidance-for-reported-zero-day-vulnerabilities-in-microsoft-exchange-server/;  https://nvd.nist.gov/vuln/detail/CVE-2022-41082","dueDate":"2022-10-21","product":"Exchange Server","dateAdded":"2022-09-30","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Exchange Server contains an unspecified vulnerability that allows for authenticated remote code execution. Dubbed \"ProxyNotShell,\" this vulnerability is chainable with CVE-2022-41040 which allows for the remote code execution.","vulnerabilityName":"Microsoft Exchange Server Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2022-41082","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:72a5365d-d18e-416f-a08d-cac7c40e7a07","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-41082","advisory_id":"72a5365d-d18e-416f-a08d-cac7c40e7a07","event_types":["advisory"],"published_at":"2026-10-24T21:02:20.731928+00:00","technologies":["core-kev","exchange-server"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-09-30T00:00:00+00:00","detail_url":"/events/1422"}]}},{"id":1399,"cve_ids":["CVE-2022-41080"],"payload":{"kind":"advisory","title":"Microsoft Exchange Server Privilege Escalation Vulnerability","summary":"Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation. This vulnerability is chainable with CVE-2022-41082, which allows for remote code execution. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2022-41080","products":[{"name":{"value":"Exchange Server","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-41080","aliases":["CVE-2022-41080"],"affected":[],"modified":"2023-01-10T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2022-41080","notes":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-41080;  https://nvd.nist.gov/vuln/detail/CVE-2022-41080","dueDate":"2023-01-31","product":"Exchange Server","dateAdded":"2023-01-10","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation. This vulnerability is chainable with CVE-2022-41082, which allows for remote code execution.","vulnerabilityName":"Microsoft Exchange Server Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2022-41080","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:5ba4c884-0642-4c89-a288-dceb8bb71cae","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-41080","advisory_id":"5ba4c884-0642-4c89-a288-dceb8bb71cae","event_types":["advisory"],"published_at":"2026-10-24T21:01:57.130584+00:00","technologies":["core-kev","exchange-server"],"context_update":false,"extraction_method":"structured","source_published_at":"2023-01-10T00:00:00+00:00","detail_url":"/advisories/advisory%3A5ba4c884-0642-4c89-a288-dceb8bb71cae","group":{"id":"advisory:5ba4c884-0642-4c89-a288-dceb8bb71cae","revision":1,"primary_event_id":1387,"change":"published","superseded_by":[],"changed":{"id":1387,"cve_ids":["CVE-2022-41080"],"payload":{"kind":"advisory","title":"Microsoft Exchange Server Privilege Escalation Vulnerability","summary":"Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation. This vulnerability is chainable with CVE-2022-41082, which allows for remote code execution. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2022-41080","products":[{"name":{"value":"Exchange Server","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-41080","aliases":["CVE-2022-41080"],"affected":[],"modified":"2023-01-10T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2022-41080","notes":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-41080;  https://nvd.nist.gov/vuln/detail/CVE-2022-41080","dueDate":"2023-01-31","product":"Exchange Server","dateAdded":"2023-01-10","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation. This vulnerability is chainable with CVE-2022-41082, which allows for remote code execution.","vulnerabilityName":"Microsoft Exchange Server Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2022-41080","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:5ba4c884-0642-4c89-a288-dceb8bb71cae","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-41080","advisory_id":"5ba4c884-0642-4c89-a288-dceb8bb71cae","event_types":["advisory"],"published_at":"2026-10-24T21:01:57.130584+00:00","technologies":["core-kev","exchange-server"],"context_update":false,"extraction_method":"structured","source_published_at":"2023-01-10T00:00:00+00:00","detail_url":"/events/1387"},"members":[{"id":1387,"cve_ids":["CVE-2022-41080"],"payload":{"kind":"advisory","title":"Microsoft Exchange Server Privilege Escalation Vulnerability","summary":"Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation. This vulnerability is chainable with CVE-2022-41082, which allows for remote code execution. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2022-41080","products":[{"name":{"value":"Exchange Server","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-41080","aliases":["CVE-2022-41080"],"affected":[],"modified":"2023-01-10T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2022-41080","notes":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-41080;  https://nvd.nist.gov/vuln/detail/CVE-2022-41080","dueDate":"2023-01-31","product":"Exchange Server","dateAdded":"2023-01-10","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation. This vulnerability is chainable with CVE-2022-41082, which allows for remote code execution.","vulnerabilityName":"Microsoft Exchange Server Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2022-41080","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:5ba4c884-0642-4c89-a288-dceb8bb71cae","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-41080","advisory_id":"5ba4c884-0642-4c89-a288-dceb8bb71cae","event_types":["advisory"],"published_at":"2026-10-24T21:01:57.130584+00:00","technologies":["core-kev","exchange-server"],"context_update":false,"extraction_method":"structured","source_published_at":"2023-01-10T00:00:00+00:00","detail_url":"/events/1387"}]}},{"id":1186,"cve_ids":["CVE-2024-21410"],"payload":{"kind":"advisory","title":"Microsoft Exchange Server Privilege Escalation Vulnerability","summary":"Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation. CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","evidence":"kev:CVE-2024-21410","products":[{"name":{"value":"Exchange Server","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2024-21410","aliases":["CVE-2024-21410"],"affected":[],"modified":"2024-02-15T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-287"],"cveID":"CVE-2024-21410","notes":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21410; https://nvd.nist.gov/vuln/detail/CVE-2024-21410","dueDate":"2024-03-07","product":"Exchange Server","dateAdded":"2024-02-15","vendorProject":"Microsoft","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","known_exploited":true,"shortDescription":"Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation.","vulnerabilityName":"Microsoft Exchange Server Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2024-21410","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:37330779-2810-40a7-86c9-08d5467d39d3","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-21410","advisory_id":"37330779-2810-40a7-86c9-08d5467d39d3","event_types":["advisory"],"published_at":"2026-10-24T20:57:20.466524+00:00","technologies":["core-kev","exchange-server"],"context_update":false,"extraction_method":"structured","source_published_at":"2024-02-15T00:00:00+00:00","detail_url":"/advisories/advisory%3A37330779-2810-40a7-86c9-08d5467d39d3","group":{"id":"advisory:37330779-2810-40a7-86c9-08d5467d39d3","revision":1,"primary_event_id":1177,"change":"published","superseded_by":[],"changed":{"id":1177,"cve_ids":["CVE-2024-21410"],"payload":{"kind":"advisory","title":"Microsoft Exchange Server Privilege Escalation Vulnerability","summary":"Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation. CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","evidence":"kev:CVE-2024-21410","products":[{"name":{"value":"Exchange Server","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2024-21410","aliases":["CVE-2024-21410"],"affected":[],"modified":"2024-02-15T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-287"],"cveID":"CVE-2024-21410","notes":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21410; https://nvd.nist.gov/vuln/detail/CVE-2024-21410","dueDate":"2024-03-07","product":"Exchange Server","dateAdded":"2024-02-15","vendorProject":"Microsoft","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","known_exploited":true,"shortDescription":"Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation.","vulnerabilityName":"Microsoft Exchange Server Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2024-21410","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:37330779-2810-40a7-86c9-08d5467d39d3","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-21410","advisory_id":"37330779-2810-40a7-86c9-08d5467d39d3","event_types":["advisory"],"published_at":"2026-10-24T20:57:20.466524+00:00","technologies":["core-kev","exchange-server"],"context_update":false,"extraction_method":"structured","source_published_at":"2024-02-15T00:00:00+00:00","detail_url":"/events/1177"},"members":[{"id":1177,"cve_ids":["CVE-2024-21410"],"payload":{"kind":"advisory","title":"Microsoft Exchange Server Privilege Escalation Vulnerability","summary":"Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation. CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","evidence":"kev:CVE-2024-21410","products":[{"name":{"value":"Exchange Server","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2024-21410","aliases":["CVE-2024-21410"],"affected":[],"modified":"2024-02-15T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-287"],"cveID":"CVE-2024-21410","notes":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21410; https://nvd.nist.gov/vuln/detail/CVE-2024-21410","dueDate":"2024-03-07","product":"Exchange Server","dateAdded":"2024-02-15","vendorProject":"Microsoft","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","known_exploited":true,"shortDescription":"Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation.","vulnerabilityName":"Microsoft Exchange Server Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2024-21410","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:37330779-2810-40a7-86c9-08d5467d39d3","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-21410","advisory_id":"37330779-2810-40a7-86c9-08d5467d39d3","event_types":["advisory"],"published_at":"2026-10-24T20:57:20.466524+00:00","technologies":["core-kev","exchange-server"],"context_update":false,"extraction_method":"structured","source_published_at":"2024-02-15T00:00:00+00:00","detail_url":"/events/1177"}]}},{"id":1110,"cve_ids":["CVE-2021-31196"],"payload":{"kind":"advisory","title":"Microsoft Exchange Server Information Disclosure Vulnerability","summary":"Microsoft Exchange Server contains an information disclosure vulnerability that allows for remote code execution. CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","evidence":"kev:CVE-2021-31196","products":[{"name":{"value":"Exchange Server","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-31196","aliases":["CVE-2021-31196"],"affected":[],"modified":"2024-08-21T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2021-31196","notes":"https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2021-31196; https://nvd.nist.gov/vuln/detail/CVE-2021-31196","dueDate":"2024-09-11","product":"Exchange Server","dateAdded":"2024-08-21","vendorProject":"Microsoft","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","known_exploited":true,"shortDescription":"Microsoft Exchange Server contains an information disclosure vulnerability that allows for remote code execution.","vulnerabilityName":"Microsoft Exchange Server Information Disclosure Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2021-31196","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:20624445-f8dc-45df-a4f1-b0854bf766d0","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-31196","advisory_id":"20624445-f8dc-45df-a4f1-b0854bf766d0","event_types":["advisory"],"published_at":"2026-10-24T20:56:34.945965+00:00","technologies":["core-kev","exchange-server"],"context_update":false,"extraction_method":"structured","source_published_at":"2024-08-21T00:00:00+00:00","detail_url":"/advisories/advisory%3A20624445-f8dc-45df-a4f1-b0854bf766d0","group":{"id":"advisory:20624445-f8dc-45df-a4f1-b0854bf766d0","revision":1,"primary_event_id":1102,"change":"published","superseded_by":[],"changed":{"id":1102,"cve_ids":["CVE-2021-31196"],"payload":{"kind":"advisory","title":"Microsoft Exchange Server Information Disclosure Vulnerability","summary":"Microsoft Exchange Server contains an information disclosure vulnerability that allows for remote code execution. CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","evidence":"kev:CVE-2021-31196","products":[{"name":{"value":"Exchange Server","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-31196","aliases":["CVE-2021-31196"],"affected":[],"modified":"2024-08-21T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2021-31196","notes":"https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2021-31196; https://nvd.nist.gov/vuln/detail/CVE-2021-31196","dueDate":"2024-09-11","product":"Exchange Server","dateAdded":"2024-08-21","vendorProject":"Microsoft","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","known_exploited":true,"shortDescription":"Microsoft Exchange Server contains an information disclosure vulnerability that allows for remote code execution.","vulnerabilityName":"Microsoft Exchange Server Information Disclosure Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2021-31196","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:20624445-f8dc-45df-a4f1-b0854bf766d0","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-31196","advisory_id":"20624445-f8dc-45df-a4f1-b0854bf766d0","event_types":["advisory"],"published_at":"2026-10-24T20:56:34.945965+00:00","technologies":["core-kev","exchange-server"],"context_update":false,"extraction_method":"structured","source_published_at":"2024-08-21T00:00:00+00:00","detail_url":"/events/1102"},"members":[{"id":1102,"cve_ids":["CVE-2021-31196"],"payload":{"kind":"advisory","title":"Microsoft Exchange Server Information Disclosure Vulnerability","summary":"Microsoft Exchange Server contains an information disclosure vulnerability that allows for remote code execution. CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","evidence":"kev:CVE-2021-31196","products":[{"name":{"value":"Exchange Server","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-31196","aliases":["CVE-2021-31196"],"affected":[],"modified":"2024-08-21T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2021-31196","notes":"https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2021-31196; https://nvd.nist.gov/vuln/detail/CVE-2021-31196","dueDate":"2024-09-11","product":"Exchange Server","dateAdded":"2024-08-21","vendorProject":"Microsoft","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","known_exploited":true,"shortDescription":"Microsoft Exchange Server contains an information disclosure vulnerability that allows for remote code execution.","vulnerabilityName":"Microsoft Exchange Server Information Disclosure Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2021-31196","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:20624445-f8dc-45df-a4f1-b0854bf766d0","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-31196","advisory_id":"20624445-f8dc-45df-a4f1-b0854bf766d0","event_types":["advisory"],"published_at":"2026-10-24T20:56:34.945965+00:00","technologies":["core-kev","exchange-server"],"context_update":false,"extraction_method":"structured","source_published_at":"2024-08-21T00:00:00+00:00","detail_url":"/events/1102"}]}},{"id":196,"cve_ids":["CVE-2023-21529"],"payload":{"kind":"advisory","title":"Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability","summary":"Microsoft Exchange Server contains a deserialization of untrusted data that allows an authenticated attacker to achieve remote code execution. CISA required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","evidence":"kev:CVE-2023-21529","products":[{"name":{"value":"Exchange Server","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2023-21529","aliases":["CVE-2023-21529"],"affected":[],"modified":"2026-04-13T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-502"],"cveID":"CVE-2023-21529","notes":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21529 ; https://nvd.nist.gov/vuln/detail/CVE-2023-21529","dueDate":"2026-04-27","product":"Exchange Server","dateAdded":"2026-04-13","vendorProject":"Microsoft","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","known_exploited":true,"shortDescription":"Microsoft Exchange Server contains a deserialization of untrusted data that allows an authenticated attacker to achieve remote code execution.","vulnerabilityName":"Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2023-21529","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:28582bc5-1cf5-4038-ba2b-5bd1e52433f3","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-21529","advisory_id":"28582bc5-1cf5-4038-ba2b-5bd1e52433f3","event_types":["advisory"],"published_at":"2026-10-24T20:42:10.588137+00:00","technologies":["core-kev","exchange-server"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-04-13T00:00:00+00:00","detail_url":"/advisories/advisory%3A28582bc5-1cf5-4038-ba2b-5bd1e52433f3","group":{"id":"advisory:28582bc5-1cf5-4038-ba2b-5bd1e52433f3","revision":1,"primary_event_id":194,"change":"published","superseded_by":[],"changed":{"id":194,"cve_ids":["CVE-2023-21529"],"payload":{"kind":"advisory","title":"Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability","summary":"Microsoft Exchange Server contains a deserialization of untrusted data that allows an authenticated attacker to achieve remote code execution. CISA required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","evidence":"kev:CVE-2023-21529","products":[{"name":{"value":"Exchange Server","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2023-21529","aliases":["CVE-2023-21529"],"affected":[],"modified":"2026-04-13T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-502"],"cveID":"CVE-2023-21529","notes":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21529 ; https://nvd.nist.gov/vuln/detail/CVE-2023-21529","dueDate":"2026-04-27","product":"Exchange Server","dateAdded":"2026-04-13","vendorProject":"Microsoft","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","known_exploited":true,"shortDescription":"Microsoft Exchange Server contains a deserialization of untrusted data that allows an authenticated attacker to achieve remote code execution.","vulnerabilityName":"Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2023-21529","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:28582bc5-1cf5-4038-ba2b-5bd1e52433f3","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-21529","advisory_id":"28582bc5-1cf5-4038-ba2b-5bd1e52433f3","event_types":["advisory"],"published_at":"2026-10-24T20:42:10.588137+00:00","technologies":["core-kev","exchange-server"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-04-13T00:00:00+00:00","detail_url":"/events/194"},"members":[{"id":194,"cve_ids":["CVE-2023-21529"],"payload":{"kind":"advisory","title":"Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability","summary":"Microsoft Exchange Server contains a deserialization of untrusted data that allows an authenticated attacker to achieve remote code execution. CISA required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","evidence":"kev:CVE-2023-21529","products":[{"name":{"value":"Exchange Server","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2023-21529","aliases":["CVE-2023-21529"],"affected":[],"modified":"2026-04-13T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-502"],"cveID":"CVE-2023-21529","notes":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21529 ; https://nvd.nist.gov/vuln/detail/CVE-2023-21529","dueDate":"2026-04-27","product":"Exchange Server","dateAdded":"2026-04-13","vendorProject":"Microsoft","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","known_exploited":true,"shortDescription":"Microsoft Exchange Server contains a deserialization of untrusted data that allows an authenticated attacker to achieve remote code execution.","vulnerabilityName":"Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2023-21529","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:28582bc5-1cf5-4038-ba2b-5bd1e52433f3","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-21529","advisory_id":"28582bc5-1cf5-4038-ba2b-5bd1e52433f3","event_types":["advisory"],"published_at":"2026-10-24T20:42:10.588137+00:00","technologies":["core-kev","exchange-server"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-04-13T00:00:00+00:00","detail_url":"/events/194"}]}}],"next_after":3647,"next_before":196}