Advisories · Technology

Microsoft Exchange Server 2016 Cumulative Update 20.

Every CVE that names Microsoft Exchange Server 2016 Cumulative Update 20 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2021-34523 CVE record

CVSS 9.0 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV · ransomware

Microsoft Exchange Server Elevation of Privilege Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 23
- Microsoft Exchange Server 2016 Cumulative Update 19
Not analysed yet 14 Jul 2021
CVE-2021-34473 CVE record

CVSS 9.1 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV · ransomware

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 23
- Microsoft Exchange Server 2016 Cumulative Update 19
- Server-side request forgery (SSRF)
Not analysed yet 14 Jul 2021
CVE-2021-33768 CVE record

CVSS 8.0 High

Microsoft Exchange Server Elevation of Privilege Vulnerability
- Microsoft Exchange Server 2016 Cumulative Update 20
- Microsoft Exchange Server 2016 Cumulative Update 21
Not analysed yet 14 Jul 2021
CVE-2021-33766 CVE record

CVSS 7.3 HighCritical · KEV, CVSS 7+ and EPSSKEV

Microsoft Exchange Server Information Disclosure Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 23
- Microsoft Exchange Server 2016 Cumulative Update 19
Not analysed yet 14 Jul 2021
CVE-2021-31206 CVE record

CVSS 7.6 HighCritical · CVSS 7+ and EPSS

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 23
- Microsoft Exchange Server 2016 Cumulative Update 20
Not analysed yet 14 Jul 2021
CVE-2021-31196 CVE record

CVSS 7.2 HighCritical · KEV, CVSS 7+ and EPSSKEV

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 23
- Microsoft Exchange Server 2016 Cumulative Update 20
Not analysed yet 14 Jul 2021
CVE-2021-31209 CVE record

CVSS 6.5 Medium

Microsoft Exchange Server Spoofing Vulnerability
- Microsoft Exchange Server 2019 Cumulative Update 9
- Microsoft Exchange Server 2016 Cumulative Update 20
- Authentication bypass
Not analysed yet 11 May 2021
CVE-2021-31207 CVE record

CVSS 6.6 MediumCritical · KEVKEV · ransomware

Microsoft Exchange Server Security Feature Bypass Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 23
- Microsoft Exchange Server 2019 Cumulative Update 9
- Unrestricted file upload
Not analysed yet 11 May 2021
CVE-2021-31198 CVE record

CVSS 7.8 High

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2019 Cumulative Update 9
- Microsoft Exchange Server 2016 Cumulative Update 20
- Code injection
Not analysed yet 11 May 2021
CVE-2021-31195 CVE record

CVSS 6.5 Medium

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2016 Cumulative Update 19
- Microsoft Exchange Server 2019 Cumulative Update 8
- Authentication bypass
Not analysed yet 11 May 2021
CVE-2021-28483 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2019 Cumulative Update 9
- Microsoft Exchange Server 2016 Cumulative Update 20
Not analysed yet 13 Apr 2021
CVE-2021-28482 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2019 Cumulative Update 9
- Microsoft Exchange Server 2016 Cumulative Update 20
Not analysed yet 13 Apr 2021
CVE-2021-28481 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2019 Cumulative Update 9
- Microsoft Exchange Server 2016 Cumulative Update 20
Not analysed yet 13 Apr 2021
CVE-2021-28480 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 23
- Microsoft Exchange Server 2016 Cumulative Update 19
Not analysed yet 13 Apr 2021