CVE-2021-31195

Microsoft Exchange Server Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-31198.

Recent assessments:

NinjaOperator at August 09, 2021 8:19pm UTC reported:

PoC is publicly available <https://blog.orange.tw/2021/08/proxyoracle-a-new-attack-surface-on-ms-exchange-part-2.html?m=1&gt;
Microsoft has already patched this vulnerabilities and exploitation has not been observed. However, threat actors could exploit these vulnerabilities by sending users an email to visit a malicious link and recover passwords in plaintext.

Assessed Attacker Value: 0
Assessed Attacker Value: 0Assessed Attacker Value: 0