CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2021-03-03
Microsoft Exchange Server Remote Code Execution (RCE) Vulnerability (ProxyLogon SSRF) - CVE-2021-26855
[Affected Scope] On-premises Microsoft Exchange Server 2013, 2016, and 2019
[Impact] Unauthenticated remote attackers can bypass authentication, access sensitive mailbox data, and chain with other vulnerabilities to execute arbitrary code (RCE)
[Mitigation] Immediately apply the official Microsoft Cumulative Update (CU) and Security Update (SU), or implement IIS URL Rewrite rules to block malicious requests