Lucene search
CISACISA-KEV-CVE-2021-31207HistoryNov 03, 2021 - 12:00 a.m.
Microsoft Exchange Server Security Feature Bypass Vulnerability
2021-11-0300:00:00
CISA
www.cisa.gov
9
microsoft exchange server
security feature bypass
vulnerability
CVSS2
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
CVSS3
6.6
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS
0.962
Percentile
99.6%
Microsoft Exchange Server contains an unspecified vulnerability that allows for security feature bypass.
Related
prion
prion
Security feature bypass
2021-05-11 19:15:00
checkpoint_advisories
checkpoint_advisories
cvelist
cvelist
mscve
mscve
Microsoft Exchange Server Security Feature Bypass Vulnerability
2021-05-11 07:00:00
zdi
zdi
attackerkb
attackerkb
CVE-2021-31207
2021-05-11 00:00:00
ProxyShell Exploit Chain
2023-12-28 00:00:00
nvd
nvd
CVE-2021-31207
2021-05-11 19:15:10
cve
cve
CVE-2021-31207
2021-05-11 19:15:10
rapid7blog
rapid7blog
For Microsoft Exchange Server Vulnerabilities, Patching Remains Patchy
2021-10-06 14:07:12
Metasploit Wrap-Up
2021-08-20 19:12:00
ProxyShell: More Widespread Exploitation of Microsoft Exchange Servers
2021-08-12 21:08:43
thn
thn
New Incident Report Reveals How Hive Ransomware Targets Organizations
2022-04-21 10:00:00
WARNING: Microsoft Exchange Under Attack With ProxyShell Flaws
2021-08-22 09:51:00
MS Exchange Server Flaws Exploited to Deploy Keylogger in Targeted Attacks
2024-05-22 07:41:00
threatpost
threatpost
ProxyShell Attacks Pummel Unpatched Exchange Servers
2021-08-23 18:54:29
‘Tortilla’ Wraps Exchange Servers in ProxyShell Attacks
2021-11-03 18:16:37
Microsoft Breaks Silence on Barrage of ProxyShell Attacks
2021-08-26 12:39:54
trellix
trellix
Trellix Global Defenders: Analysis and Protections for BlackByte Ransomware
2022-02-28 00:00:00
Trellix Global Defenders: Analysis and Protections for BlackByte Ransomware
2022-02-28 00:00:00
zdt
zdt
Microsoft Exchange ProxyShell Remote Code Execution Exploit
2021-08-21 00:00:00
malwarebytes
malwarebytes
IIS extensions are on the rise as backdoors to servers
2022-07-27 13:58:06
Patch now! Microsoft Exchange is being attacked via ProxyShell
2021-08-23 13:21:08
hivepro
hivepro
Hive Ransomware targets organizations with ProxyShell exploit
2022-04-22 14:34:47
Magic Hound Exploiting Old Microsoft Exchange ProxyShell Vulnerabilities
2022-03-25 04:05:09
BlackByte ransomware exploits Microsoft Servers ProxyShell Vulnerabilities
2021-12-07 13:24:49
metasploit
metasploit
Microsoft Exchange ProxyShell RCE
2021-08-18 14:50:34
fireeye
fireeye
PST, Want a Shell? ProxyShell Exploiting Microsoft Exchange Servers
2021-09-03 10:00:00
githubexploit
githubexploit
Exploit for Vulnerability in Microsoft
2021-10-02 07:29:24
Exploit for Vulnerability in Microsoft
2021-08-10 15:01:02
Exploit for Unrestricted Upload of File with Dangerous Type in Microsoft
2021-09-04 15:34:03
packetstorm
packetstorm
Microsoft Exchange ProxyShell Remote Code Execution
2021-08-20 00:00:00
pentestpartners
pentestpartners
Hive Ransomware is on the rise. How should you deal with it?
2022-11-18 06:44:42
cisa
cisa
Urgent: Protect Against Active Exploitation of ProxyShell Vulnerabilities
2021-08-21 00:00:00
qualysblog
qualysblog
AvosLocker Ransomware Behavior Examined on Windows & Linux
2022-03-07 05:18:46
In-Depth Look Into Data-Driven Science Behind Qualys TruRisk
2022-10-10 14:32:29
Qualys Tackles 2022’s Top Routinely Exploited Cyber Vulnerabilities
2023-08-24 19:07:05
securelist
securelist
Tropic Trooper spies on government entities in the Middle East
2024-09-05 08:00:12
CVE-2022-41040 and CVE-2022-41082 – zero-days in MS Exchange
2022-12-19 16:15:49
From Caribbean shores to your devices: analyzing Cuba ransomware
2023-09-11 10:00:26
mskb
mskb
nessus
nessus
Security Updates for Exchange (May 2021)
2021-05-11 00:00:00
kaspersky
kaspersky
KLA12169 Multiple vulnerabilities in Microsoft Exchange Server
2021-05-11 00:00:00
mmpc
mmpc
ics
ics
People’s Republic of China (PRC) Ministry of State Security APT40 Tradecraft in Action
2024-07-08 12:00:00
#StopRansomware: Hive Ransomware
2022-11-25 12:00:00
avleonov
avleonov
mssecure
mssecure
CVSS2
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
CVSS3
6.6
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS
0.962
Percentile
99.6%
Related for CISA-KEV-CVE-2021-31207