Security Updates for Exchange (January 2022)

The Microsoft Exchange Server installed on the remote host is missing security updates. It is, therefore, affected by a remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary code. %NASLMINLEVEL 70300 C Tenable, Inc...

CVE-2022-21969

Microsoft Exchange Server Remote Code Execution Vulnerability...

CVE-2022-21969

CVE-2022-21969 is a Microsoft Exchange Server Remote Code Execution vulnerability identified in the Exchange certificate handling RPC path. The root cause described in the connected material centers on deserialization of crafted ExchangeCertificateRpc input via a BinaryFormatter-based chain (Exch...

CVE-2022-21969 Microsoft Exchange Server Remote Code Execution Vulnerability

...

KLA12419 ACE vulnerabilities in Microsoft Server Software

Remote code execution vulnerabilities were found in Microsoft Server Software. Malicious users can exploit these vulnerabilities to execute arbitrary code. Original advisories CVE-2022-21855 CVE-2022-21846 CVE-2022-21969 Related products Microsoft-Exchange-Server CVE list CVE-2022-21855 critical...