CVE-2021-31196

🗓️ 14 Jul 2021 17:53:12Reported by microsoftType

cve🔗 web.nvd.nist.gov📰️ 11 Media mentions👁 449 Views

Microsoft Exchange Server Remote Code Execution Vulnerability CVE-2021-3119

Reporter	Title	Published	Views	Family All 32
ICS	Iranian Islamic Revolutionary Guard Corps-Affiliated Cyber Actors Exploiting Vulnerabilities for Data Extortion and Disk Encryption for Ransom Operations	14 Sep 202212:00	–	ics
ATTACKERKB	CVE-2021-31196	14 Jul 202100:00	–	attackerkb
Information Security Automation	Security News: Exchange ProxyShell, Zoom RCE, Citrix Canceled PT Acknowledgments, Cisco No Patch Router RCEs	31 Aug 202123:16	–	avleonov
BDU FSTEC	The vulnerability of the Microsoft Exchange Server mail server, related to errors in code generation, allows a hacker to execute arbitrary code.	16 Dec 202100:00	–	bdu_fstec
GithubExploit	Exploit for Server-Side Request Forgery in Microsoft	14 Apr 202111:12	–	githubexploit
GithubExploit	Exploit for Server-Side Request Forgery in Microsoft	14 Apr 202111:12	–	githubexploit
Circl	CVE-2021-31196	15 Jul 202110:13	–	circl
CISA KEV Catalog	Microsoft Exchange Server Information Disclosure Vulnerability	21 Aug 202400:00	–	cisa_kev
CISA	CISA Adds Four Known Exploited Vulnerabilities to Catalog	21 Aug 202412:00	–	cisa
CNNVD	Microsoft Exchange Server 代码注入漏洞	13 Jul 202100:00	–	cnnvd

NVD

Vulners

Node

microsoft exchange_serverMatch2013cumulative_update_23

microsoft exchange_serverMatch2016cumulative_update_20

microsoft exchange_serverMatch2016cumulative_update_21

microsoft exchange_serverMatch2019cumulative_update_10

microsoft exchange_serverMatch2019cumulative_update_9

[
  {
    "vendor": "Microsoft",
    "product": "Microsoft Exchange Server 2019 Cumulative Update 9",
    "cpes": [
      "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_9:*:*:*:*:*:*"
    ],
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "15.02.0",
        "lessThan": "15.02.0858.015",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft Exchange Server 2016 Cumulative Update 20",
    "cpes": [
      "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_20:*:*:*:*:*:*"
    ],
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "15.01.0",
        "lessThan": "15.01.2242.012",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft Exchange Server 2013 Cumulative Update 23",
    "cpes": [
      "cpe:2.3:a:microsoft:exchange_server:2013:cumulative_update_23:*:*:*:*:*:*"
    ],
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "15.00.0",
        "lessThan": "15.00.1497.023",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft Exchange Server 2016 Cumulative Update 21",
    "cpes": [
      "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_21:*:*:*:*:*:*"
    ],
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "15.01.0",
        "lessThan": "15.01.2308.014",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft Exchange Server 2019 Cumulative Update 10",
    "cpes": [
      "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_10:*:*:*:*:*:*"
    ],
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "15.02.0",
        "lessThan": "15.02.0922.013",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  }
]

Source	Link
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31196
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

17 Jun 2026 03:51Current

8.6High risk

Vulners AI Score8.6

CVSS 26.5

CVSS 3.17.2

EPSS0.4638

SSVC

In Wild