CVE-2021-42305: Microsoft Exchange Server Spoofing Vulnerability
Microsoft Exchange Server Spoofing Vulnerability
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 15.01.2308.020Patch KB5007409 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 15.02.0792.019Patch KB5007409 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 15.02.0986.014Patch KB5007409 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 15.01.2375.017Patch KB5007409 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 15.00.1497.026Patch KB5007409
Event History
Frequently Asked Questions
What is CVE-2021-42305?
CVE-2021-42305 is a Spoofing Vulnerability in Microsoft Exchange Server.
What versions of Microsoft Exchange Server are affected by CVE-2021-42305?
CVE-2021-42305 affects Microsoft Exchange Server 2013 Cumulative Update 23, 2016 Cumulative Update 21 and 22, and 2019 Cumulative Update 10 and 11.
What is the severity of CVE-2021-42305?
CVE-2021-42305 has a severity rating of 6.5 (Medium).
How can I fix CVE-2021-42305?
To fix CVE-2021-42305, it is recommended to apply the necessary security updates provided by Microsoft.
Where can I find more information about CVE-2021-42305?
You can find more information about CVE-2021-42305 on the Microsoft Security Guidance Advisory page: [https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-42305](https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-42305).