description: A remote code execution vulnerability exists in Microsoft Exchange through the deserialization of metadata via PowerShell, aka 'Microsoft Exchange Remote Code Execution Vulnerability'.
problem types: Remote Code Execution
affected:
{
product: Microsoft Exchange Server 2019
vendor: Microsoft
versions:
status: affected, version: Cumulative Update 2
}
{
product: Microsoft Exchange Server 2016
vendor: Microsoft
versions:
status: affected, version: Cumulative Update 13
}
{
product: Microsoft Exchange Server 2013
vendor: Microsoft
versions:
status: affected, version: Cumulative Update 23
}
{
product: Microsoft Exchange Server 2019 Cumulative Update 3
vendor: Microsoft
versions:
status: affected, version: unspecified
}
{
product: Microsoft Exchange Server 2016 Cumulative Update 14
vendor: Microsoft
versions:
status: affected, version: unspecified
}
