CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Showing 1–1 of 1 advisories (Page 1/1)

CVE-2021-345239.0/CRITICALEPSS 100.0%CISA KEV

2021-07-14

Microsoft Exchange Server Elevation of Privilege Vulnerability (CVE-2021-34523, ProxyShell)

[Affected Scope] Microsoft Exchange Server 2013, 2016, and 2019 on-premises deployments

[Impact] Attackers can elevate privileges to SYSTEM, enabling remote code execution (RCE) when chained with other ProxyShell vulnerabilities

[Mitigation] Immediately apply the official Microsoft Cumulative Updates (CU) and Security Updates (SU), and restrict external access to Exchange IIS ports

cve-2021-34523 proxyshell elevation-of-privilege cwe-269

Full Advisory & Mitigation