What is CVE-2021-1730?

CVE-2021-1730 is a Microsoft Exchange Server Spoofing Vulnerability.

What is the severity of CVE-2021-1730?

CVE-2021-1730 has a severity level of high (5.4).

What software is affected by CVE-2021-1730?

Microsoft Exchange Server 2016 CU18 and Exchange Server 2019 CU7 are affected by CVE-2021-1730.

How can I fix CVE-2021-1730?

Apply the relevant patches provided by Microsoft for Exchange Server 2016 CU18 and Exchange Server 2019 CU7.

Where can I find more information about CVE-2021-1730?

You can find more information about CVE-2021-1730 on the Microsoft Security Response Center's advisory page and the Microsoft Update Guide.

Vulnerability/
CVE-2021-1730

medium

5.8

9/2/2021

25/2/2021

3/8/2024

CVE-2021-1730: Microsoft Exchange Server Spoofing Vulnerability

First published: Tue Feb 09 2021(Updated: )

A spoofing vulnerability exists in Microsoft Exchange Server which could result in an attack that would allow a malicious actor to impersonate the user. This update addresses this vulnerability. To prevent these types of attacks, Microsoft recommends customers to download inline images from different DNSdomains than the rest of OWA. Please see further instructions in the FAQ to put in place this mitigations.

Credit: secure@microsoft.com secure@microsoft.com

Affected Software	Affected Version	How to fix
	=7	fix available externally
	=18	fix available externally
	=2016-cumulative_update_18
	=2019-cumulative_update_7
Microsoft Exchange Server	=2016-cumulative_update_18
Microsoft Exchange Server	=2019-cumulative_update_7

Remedy

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1730

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is CVE-2021-1730?
CVE-2021-1730 is a Microsoft Exchange Server Spoofing Vulnerability.
What is the severity of CVE-2021-1730?
CVE-2021-1730 has a severity level of high (5.4).
What software is affected by CVE-2021-1730?
Microsoft Exchange Server 2016 CU18 and Exchange Server 2019 CU7 are affected by CVE-2021-1730.
How can I fix CVE-2021-1730?
Apply the relevant patches provided by Microsoft for Exchange Server 2016 CU18 and Exchange Server 2019 CU7.
Where can I find more information about CVE-2021-1730?
You can find more information about CVE-2021-1730 on the Microsoft Security Response Center's advisory page and the Microsoft Update Guide.

agent/type
agent/last-modified-date
agent/first-publish-date
collector/msrc
source/Microsoft
collector/msrc-cve
agent/references
agent/author
agent/softwarecombine
agent/software-canonical-lookup
agent/title
agent/remedy
agent/severity
agent/event
collector/nvd-api
source/NVD
agent/software-canonical-lookup-request
collector/nvd-index
agent/tags
agent/description
collector/mitre-cve
source/MITRE
vendor/microsoft
canonical/microsoft exchange server 2016
version/microsoft exchange server 2016/18
canonical/microsoft exchange server 2019
version/microsoft exchange server 2019/7
canonical/microsoft exchange server
version/microsoft exchange server/2016-cumulative_update_18
version/microsoft exchange server/2019-cumulative_update_7

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.