CVE-2021-31195: Microsoft Exchange Server Remote Code Execution Vulnerability

Published May 11, 2021

Updated

Microsoft Exchange Server Remote Code Execution Vulnerability

Affected Software

5 affected components

Microsoft Exchange Server=2013-cumulative_update_23

Microsoft Exchange Server=2016-cumulative_update_19

Microsoft Exchange Server=2016-cumulative_update_20

Microsoft Exchange Server=2019-cumulative_update_8

Microsoft Exchange Server=2019-cumulative_update_9

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31195

Event History

May 11, 2021

CVE Published

via MITRE·07:11 PM

Data Sourced

via MITRE·07:11 PM

DescriptionSeverity

Data Sourced

via NVD·07:15 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is CVE-2021-31195?

CVE-2021-31195 is a remote code execution vulnerability in Microsoft Exchange Server.

What is the severity of CVE-2021-31195?

CVE-2021-31195 has a severity rating of high with a score of 6.5.

Which versions of Microsoft Exchange Server are affected by CVE-2021-31195?

Microsoft Exchange Server 2013 (cumulative update 23), 2016 (cumulative update 19 and 20), and 2019 (cumulative update 8 and 9) are affected by CVE-2021-31195.

How can I fix CVE-2021-31195?

To fix CVE-2021-31195, apply the respective cumulative update for your version of Microsoft Exchange Server as mentioned in the Microsoft security advisory.

Where can I find more information about CVE-2021-31195?

You can find more information about CVE-2021-31195 in the Microsoft security advisory available at the following link: [https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31195](https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31195)