Advisories · Technology

Microsoft Exchange Server 2019 Cumulative Update 9.

Every CVE that names Microsoft Exchange Server 2019 Cumulative Update 9 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2021-34523 CVE record

CVSS 9.0 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV · ransomware

Microsoft Exchange Server Elevation of Privilege Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 23
- Microsoft Exchange Server 2016 Cumulative Update 19
Not analysed yet 14 Jul 2021
CVE-2021-34473 CVE record

CVSS 9.1 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV · ransomware

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 23
- Microsoft Exchange Server 2016 Cumulative Update 19
- Server-side request forgery (SSRF)
Not analysed yet 14 Jul 2021
CVE-2021-33768 CVE record

CVSS 8.0 High

Microsoft Exchange Server Elevation of Privilege Vulnerability
- Microsoft Exchange Server 2016 Cumulative Update 20
- Microsoft Exchange Server 2016 Cumulative Update 21
Not analysed yet 14 Jul 2021
CVE-2021-33766 CVE record

CVSS 7.3 HighCritical · KEV, CVSS 7+ and EPSSKEV

Microsoft Exchange Server Information Disclosure Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 23
- Microsoft Exchange Server 2016 Cumulative Update 19
Not analysed yet 14 Jul 2021
CVE-2021-31206 CVE record

CVSS 7.6 HighCritical · CVSS 7+ and EPSS

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 23
- Microsoft Exchange Server 2016 Cumulative Update 20
Not analysed yet 14 Jul 2021
CVE-2021-31196 CVE record

CVSS 7.2 HighCritical · KEV, CVSS 7+ and EPSSKEV

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 23
- Microsoft Exchange Server 2016 Cumulative Update 20
Not analysed yet 14 Jul 2021
CVE-2021-31209 CVE record

CVSS 6.5 Medium

Microsoft Exchange Server Spoofing Vulnerability
- Microsoft Exchange Server 2019 Cumulative Update 9
- Microsoft Exchange Server 2016 Cumulative Update 20
- Authentication bypass
Not analysed yet 11 May 2021
CVE-2021-31207 CVE record

CVSS 6.6 MediumCritical · KEVKEV · ransomware

Microsoft Exchange Server Security Feature Bypass Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 23
- Microsoft Exchange Server 2019 Cumulative Update 9
- Unrestricted file upload
Not analysed yet 11 May 2021
CVE-2021-31198 CVE record

CVSS 7.8 High

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2019 Cumulative Update 9
- Microsoft Exchange Server 2016 Cumulative Update 20
- Code injection
Not analysed yet 11 May 2021
CVE-2021-31195 CVE record

CVSS 6.5 Medium

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2016 Cumulative Update 19
- Microsoft Exchange Server 2019 Cumulative Update 8
- Authentication bypass
Not analysed yet 11 May 2021
CVE-2021-28483 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2019 Cumulative Update 9
- Microsoft Exchange Server 2016 Cumulative Update 20
Not analysed yet 13 Apr 2021
CVE-2021-28482 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2019 Cumulative Update 9
- Microsoft Exchange Server 2016 Cumulative Update 20
Not analysed yet 13 Apr 2021
CVE-2021-28481 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2019 Cumulative Update 9
- Microsoft Exchange Server 2016 Cumulative Update 20
Not analysed yet 13 Apr 2021
CVE-2021-28480 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 23
- Microsoft Exchange Server 2016 Cumulative Update 19
Not analysed yet 13 Apr 2021