What is CVE-2022-21846?

CVE-2022-21846 is a remote code execution vulnerability in Microsoft Exchange Server.

How severe is CVE-2022-21846?

CVE-2022-21846 is classified as critical with a severity value of 9.

Which versions of Microsoft Exchange Server are affected by CVE-2022-21846?

The versions of Microsoft Exchange Server affected by CVE-2022-21846 are 2013 cumulative update 23, 2016 cumulative update 21 and 22, and 2019 cumulative update 10 and 11.

How can I fix CVE-2022-21846?

To fix CVE-2022-21846, you should apply the relevant security updates provided by Microsoft.

Where can I find more information about CVE-2022-21846?

You can find more information about CVE-2022-21846 on the official Microsoft Security Guidance Advisory page: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21846

Vulnerability/
CVE-2022-21846

critical

11/1/2022

21/12/2023

CVE-2022-21846: Microsoft Exchange Server Remote Code Execution Vulnerability

First published: Tue Jan 11 2022(Updated: )

Microsoft Exchange Server Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-21855, CVE-2022-21969.

Credit: secure@microsoft.com secure@microsoft.com

Affected Software	Affected Version	How to fix
Microsoft Exchange Server	=2013-cumulative_update_23
Microsoft Exchange Server	=2016-cumulative_update_21
Microsoft Exchange Server	=2016-cumulative_update_22
Microsoft Exchange Server	=2019-cumulative_update_10
Microsoft Exchange Server	=2019-cumulative_update_11

Remedy

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21846

Never miss a vulnerability like this again

Reference Links

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21846

Frequently Asked Questions

What is CVE-2022-21846?
CVE-2022-21846 is a remote code execution vulnerability in Microsoft Exchange Server.
How severe is CVE-2022-21846?
CVE-2022-21846 is classified as critical with a severity value of 9.
Which versions of Microsoft Exchange Server are affected by CVE-2022-21846?
The versions of Microsoft Exchange Server affected by CVE-2022-21846 are 2013 cumulative update 23, 2016 cumulative update 21 and 22, and 2019 cumulative update 10 and 11.
How can I fix CVE-2022-21846?
To fix CVE-2022-21846, you should apply the relevant security updates provided by Microsoft.
Where can I find more information about CVE-2022-21846?
You can find more information about CVE-2022-21846 on the official Microsoft Security Guidance Advisory page: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21846

collector/mitre-cve
agent/title
agent/references
agent/severity
agent/author
agent/type
agent/event
agent/description
agent/remedy
agent/last-modified-date
agent/softwarecombine
agent/first-publish-date
agent/tags
collector/nvd-api
agent/software-canonical-lookup-request
collector/nvd-index
vendor/microsoft
canonical/microsoft exchange server
version/microsoft exchange server/2013-cumulative_update_23
version/microsoft exchange server/2016-cumulative_update_21
version/microsoft exchange server/2016-cumulative_update_22
version/microsoft exchange server/2019-cumulative_update_10
version/microsoft exchange server/2019-cumulative_update_11

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.