CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2021-05-11
Microsoft Exchange Server Security Feature Bypass Vulnerability (CVE-2021-31207) - ProxyShell Chain Analysis and Mitigation Guide
[Affected Scope] Microsoft Exchange Server 2013, 2016, and 2019
[Impact] Allows authenticated attackers to bypass file path validation and write arbitrary files, leading to Remote Code Execution (RCE) when chained with other ProxyShell vulnerabilities
[Mitigation] Apply the latest Microsoft Cumulative Updates (CU) and Security Updates (SU) immediately, and restrict external access to Exchange IIS virtual directories