title: Microsoft Exchange Server Remote Code Execution Vulnerability
description: Microsoft Exchange Server Remote Code Execution Vulnerability
problem types: Remote Code Execution
affected:
{
vendor: Microsoft
product: Microsoft Exchange Server 2019 Cumulative Update 9
cpes: cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_9:*:*:*:*:*:*
platforms: x64-based Systems
versions:
version: 15.02.0, lessThan: 15.02.0858.012, versionType: custom, status: affected
}
{
vendor: Microsoft
product: Microsoft Exchange Server 2016 Cumulative Update 20
cpes: cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_20:*:*:*:*:*:*
platforms: x64-based Systems
versions:
version: 15.01.0, lessThan: 15.01.2242.010, versionType: custom, status: affected
}
{
vendor: Microsoft
product: Microsoft Exchange Server 2013 Cumulative Update 23
cpes: cpe:2.3:a:microsoft:exchange_server:2013:cumulative_update_23:*:*:*:*:*:*
platforms: x64-based Systems
versions:
version: 15.00.0, lessThan: 15.00.1497.018, versionType: custom, status: affected
}
{
vendor: Microsoft
product: Microsoft Exchange Server 2016 Cumulative Update 19
cpes: cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_19:*:*:*:*:*:*
platforms: x64-based Systems
versions:
version: 15.01.0, lessThan: 15.01.2176.014, versionType: custom, status: affected
}
{
vendor: Microsoft
product: Microsoft Exchange Server 2019 Cumulative Update 8
cpes: cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_8:*:*:*:*:*:*
platforms: x64-based Systems
versions:
version: 15.02.0, lessThan: 15.02.0792.015, versionType: custom, status: affected
}
metrics:
format: CVSS
scenarios: GENERAL
cvssV3_1: [
version: 3.1
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
]