CVE-2021-31196 — Microsoft Exchange Server Information Disclosure Vulnerability
CVE-2021-31196: Microsoft Exchange Server Information Disclosure Vulnerability
CISA Known Exploited Vulnerability (KEV)
| Vendor / project | Microsoft |
| Product | Exchange Server |
| Date added | 2024-08-21 |
| Due date | 2024-09-11 |
| Ransomware campaign use | Unknown |
Description
Microsoft Exchange Server contains an information disclosure vulnerability that allows for remote code execution.
Required action (CISA)
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Notes
https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2021-31196; https://nvd.nist.gov/vuln/detail/CVE-2021-31196
References
- NVD: https://nvd.nist.gov/vuln/detail/CVE-2021-31196
- KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog