CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Microsoft Exchange Server Elevation of Privilege Vulnerability (CVE-2021-34523, ProxyShell)
[Affected Scope] Microsoft Exchange Server 2013, 2016, and 2019 on-premises deployments
[Impact] Attackers can elevate privileges to SYSTEM, enabling remote code execution (RCE) when chained with other ProxyShell vulnerabilities
[Mitigation] Immediately apply the official Microsoft Cumulative Updates (CU) and Security Updates (SU), and restrict external access to Exchange IIS ports
Microsoft Exchange Server ProxyShell Remote Code Execution Vulnerability (CVE-2021-34473) Technical Advisory
[Affected Scope] Microsoft Exchange Server 2013, 2016, and 2019 on-premises deployments
[Impact] Unauthenticated attackers can bypass security controls to execute arbitrary PowerShell commands with SYSTEM privileges
[Mitigation] Immediately apply the official Microsoft Cumulative Updates (CU) and Security Updates (SU), and restrict external access to Exchange management ports
Microsoft Exchange Server Security Feature Bypass Vulnerability (CVE-2021-31207) - ProxyShell Chain Analysis and Mitigation Guide
[Affected Scope] Microsoft Exchange Server 2013, 2016, and 2019
[Impact] Allows authenticated attackers to bypass file path validation and write arbitrary files, leading to Remote Code Execution (RCE) when chained with other ProxyShell vulnerabilities
[Mitigation] Apply the latest Microsoft Cumulative Updates (CU) and Security Updates (SU) immediately, and restrict external access to Exchange IIS virtual directories