Description
Microsoft Exchange Server Remote Code Execution Vulnerability
Metrics
CVSS 3.1 7.8/10
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Microsoft Exchange Server 2013 Cumulative Update 21 | >= 15.00.0, < 15.00.1395.012 |
| Microsoft | Microsoft Exchange Server 2013 Cumulative Update 22 | >= 15.00.0, < 15.00.1473.006 |
| Microsoft | Microsoft Exchange Server 2013 Cumulative Update 23 | >= 15.00.0, < 15.00.1497.012 |
| Microsoft | Microsoft Exchange Server 2013 Service Pack 1 | >= 15.00.0, < 15.00.0847.064 |
| Microsoft | Microsoft Exchange Server 2016 Cumulative Update 10 | >= 15.01.0, < 15.01.1531.012 |
| Microsoft | Microsoft Exchange Server 2016 Cumulative Update 11 | >= 15.01.0, < 15.01.1591.018 |
| Microsoft | Microsoft Exchange Server 2016 Cumulative Update 12 | >= 15.01.0, < 15.01.1713.010 |
| Microsoft | Microsoft Exchange Server 2016 Cumulative Update 13 | >= 15.01.0, < 15.01.1779.008 |
| Microsoft | Microsoft Exchange Server 2016 Cumulative Update 14 | >= 15.01.0, < 15.01.1847.012 |
| Microsoft | Microsoft Exchange Server 2016 Cumulative Update 15 | >= 15.01.0, < 15.01.1913.012 |
| Microsoft | Microsoft Exchange Server 2016 Cumulative Update 16 | >= 15.01.0, < 15.01.1979.008 |
| Microsoft | Microsoft Exchange Server 2016 Cumulative Update 17 | >= 15.01.0, < 15.01.2044.013 |
| Microsoft | Microsoft Exchange Server 2016 Cumulative Update 18 | >= 15.01.0, < 15.01.2106.013 |
| Microsoft | Microsoft Exchange Server 2016 Cumulative Update 19 | >= 15.01.0, < 15.01.2176.009 |
| Microsoft | Microsoft Exchange Server 2016 Cumulative Update 8 | >= 15.01.0, < 15.01.1415.010 |
| Microsoft | Microsoft Exchange Server 2016 Cumulative Update 9 | >= 15.01.0, < 15.01.1466.016 |
| Microsoft | Microsoft Exchange Server 2019 | >= 15.02.0, < 15.02.0221.018 |
| Microsoft | Microsoft Exchange Server 2019 Cumulative Update 1 | >= 15.02.0, < 15.01.1979.006 |
| Microsoft | Microsoft Exchange Server 2019 Cumulative Update 2 | >= 15.02.0, < 15.02.0397.011 |
| Microsoft | Microsoft Exchange Server 2019 Cumulative Update 3 | >= 15.02.0, < 15.02.0464.015 |
| Microsoft | Microsoft Exchange Server 2019 Cumulative Update 4 | >= 15.02.0, < 15.02.0659.012 |
| Microsoft | Microsoft Exchange Server 2019 Cumulative Update 5 | >= 15.02.0, < 15.02.0595.008 |
| Microsoft | Microsoft Exchange Server 2019 Cumulative Update 6 | >= 15.02.0, < 15.02.0529.013 |
| Microsoft | Microsoft Exchange Server 2019 Cumulative Update 7 | >= 15.02.0, < 15.02.0721.013 |
| Microsoft | Microsoft Exchange Server 2019 Cumulative Update 8 | >= 15.02.0, < 15.02.0792.010 |
References
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-27065Patch, Vendor Advisory
- http://packetstormsecurity.com/files/161938/Microsoft-Exchange-ProxyLogon-Remote-Code-Execution.htmlExploit, Third Party Advisory, VDB Entry
- http://packetstormsecurity.com/files/162736/Microsoft-Exchange-ProxyLogon-Collector.htmlExploit, Third Party Advisory, VDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27065Patch, Vendor Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-27065US Government Resource
Timeline
- Published
- Mar 3, 2021
- Last modified
- Oct 1, 2026
- Added to CISA KEV
- Nov 3, 2021
- NVD status
- Analyzed