KLA12169 Multiple vulnerabilities in Microsoft Exchange Server

🗓️ 11 May 2021 00:00:00Reported by Kaspersky LabType

kaspersky🔗 threats.kaspersky.com👁 116 Views

Multiple vulnerabilities in Microsoft Exchange Server. Remote code execution, spoofing, and security bypass vulnerabilities found. Exploitable by malware. Impact: ACE, SB, SUI. Affected products: Microsoft Exchange Server 2013, 2016, and 2019

Reporter	Title	Published	Views	Family All 133
0day.today	Microsoft Exchange ProxyShell Remote Code Execution Exploit	21 Aug 202100:00	–	zdt
GithubExploit	Exploit for Unrestricted Upload of File with Dangerous Type in Microsoft	4 Sep 202115:34	–	githubexploit
GithubExploit	Exploit for Unrestricted Upload of File with Dangerous Type in Microsoft	16 Mar 202600:22	–	githubexploit
GithubExploit	Exploit for Server-Side Request Forgery in Microsoft	10 Aug 202115:01	–	githubexploit
GithubExploit	Exploit for Server-Side Request Forgery in Microsoft	29 Jun 202212:37	–	githubexploit
GithubExploit	Exploit for Server-Side Request Forgery in Microsoft	14 Apr 202111:12	–	githubexploit
GithubExploit	Exploit for Unrestricted Upload of File with Dangerous Type in Microsoft	2 Oct 202107:29	–	githubexploit
GithubExploit	Exploit for Server-Side Request Forgery in Microsoft	14 Apr 202111:12	–	githubexploit
ICS	2021 Top Routinely Exploited Vulnerabilities	28 Apr 202212:00	–	ics
ICS	Iranian Islamic Revolutionary Guard Corps-Affiliated Cyber Actors Exploiting Vulnerabilities for Data Extortion and Disk Encryption for Ransom Operations	14 Sep 202212:00	–	ics

Source	Link
api	www.api.msrc.microsoft.com/sug/v2.0/en-US/vulnerability/CVE-2021-31198
api	www.api.msrc.microsoft.com/sug/v2.0/en-US/vulnerability/CVE-2021-31209
api	www.api.msrc.microsoft.com/sug/v2.0/en-US/vulnerability/CVE-2021-31207
api	www.api.msrc.microsoft.com/sug/v2.0/en-US/vulnerability/CVE-2021-31195
threats	www.threats.kaspersky.com/en/threat/Exploit.Win32.ProxyShell/
threats	www.threats.kaspersky.com/en/product/Microsoft-Exchange-Server/
support	www.support.microsoft.com/kb/5003435
statistics	www.statistics.securelist.com/

31 Mar 2025 00:00Current

9.7High risk

Vulners AI Score9.7

CVSS 26.8

CVSS 3.17.8 - 8.8

EPSS0.93835

SSVC