First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2022-21980

HighCVSS 8.0/10Last modified Jun 17, 2026

Description

Microsoft Exchange Server Elevation of Privilege Vulnerability

Metrics

CVSS 3.1 8.0/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Affected software

Vendor	Product	Versions
Microsoft	Microsoft Exchange Server 2013 Cumulative Update 23	>= 15.00.0, < 15.00.1497.042
Microsoft	Microsoft Exchange Server 2019 Cumulative Update 11	>= 15.02.0, < 15.02.0986.030
Microsoft	Microsoft Exchange Server 2016 Cumulative Update 22	>= 15.0.0, < 15.01.2375.032
Microsoft	Microsoft Exchange Server 2019 Cumulative Update 12	>= 15.02.0, < 15.02.1118.015
Microsoft	Microsoft Exchange Server 2016 Cumulative Update 23	>= 15.01.0, < 15.01.2507.013

References

Timeline

Published: Aug 9, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-219817.8Windows Common Log File System Driver Elevation of Privilege Vulnerability CVE-2022-219837.5Win32 Stream Enumeration Remote Code Execution Vulnerability CVE-2022-219848.8Windows DNS Server Remote Code Execution Vulnerability CVE-2022-219855.5Windows Remote Access Connection Manager Information Disclosure Vulnerability CVE-2022-219867.5.NET Denial of Service Vulnerability CVE-2022-219878.0Microsoft SharePoint Server Spoofing Vulnerability CVE-2022-219887.8Microsoft Office Visio Remote Code Execution Vulnerability CVE-2022-219897.8Windows Kernel Elevation of Privilege Vulnerability CVE-2022-21996.1The main MiCODUS MV720 GPS tracker web server has a reflected cross-site scripting vulnerability that could allow an attacker to gain contro CVE-2022-219908.8Remote Desktop Client Remote Code Execution Vulnerability CVE-2022-219918.1Visual Studio Code Remote Development Extension Remote Code Execution Vulnerability CVE-2022-219927.8Windows Mobile Device Management Remote Code Execution Vulnerability