Security Updates for Exchange (January 2022)

The Microsoft Exchange Server installed on the remote host is missing security updates. It is, therefore, affected by a remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary code. %NASLMINLEVEL 70300 C Tenable, Inc...

CVE-2022-21969

Microsoft Exchange Server Remote Code Execution Vulnerability...

CVE-2022-21846

CVE-2022-21846 (Microsoft Exchange Server) is a remote code execution vulnerability in Exchange Server that stems from unsafe deserialization within the ExchangeCertificateRpc path. The RPC workflow can deserialize untrusted input via ExchangeCertificateRpc.DeserializeObject, which uses a BinaryF...

KLA12419 ACE vulnerabilities in Microsoft Server Software

Remote code execution vulnerabilities were found in Microsoft Server Software. Malicious users can exploit these vulnerabilities to execute arbitrary code. Original advisories CVE-2022-21855 CVE-2022-21846 CVE-2022-21969 Related products Microsoft-Exchange-Server CVE list CVE-2022-21855 critical...