CVE-2022-21969

CriticalCVSS 9.0/10Last modified Jun 17, 2026

Description

Microsoft Exchange Server Remote Code Execution Vulnerability

Metrics

CVSS 3.1 9.0/10CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published
Jan 11, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-21979.8By using a specific credential string, an attacker with network access to the device’s web interface could circumvent the authentication schCVE-2022-219706.1Microsoft Edge (Chromium-based) Elevation of Privilege VulnerabilityCVE-2022-219717.8Windows Runtime Remote Code Execution VulnerabilityCVE-2022-219728.1Windows Point-to-Point Tunneling Protocol Remote Code Execution VulnerabilityCVE-2022-219735.5Windows Media Center Update Denial of Service VulnerabilityCVE-2022-219747.8Roaming Security Rights Management Services Remote Code Execution VulnerabilityCVE-2022-219754.7Windows Hyper-V Denial of Service VulnerabilityCVE-2022-219773.3Media Foundation Information Disclosure VulnerabilityCVE-2022-219788.2Microsoft Exchange Server Elevation of Privilege VulnerabilityCVE-2022-219794.8Microsoft Exchange Server Information Disclosure VulnerabilityCVE-2022-21984.3The WPQA Builder WordPress plugin before 5.7 which is a companion plugin to the Hilmer and Discy , does not check authorization before displCVE-2022-219808.0Microsoft Exchange Server Elevation of Privilege Vulnerability
CVE-2022-21969: Critical severity, CVSS 9.0 | Vulnix