CVE-2021-26855
Severity CVSS v4.0:
Pending analysis
Type:
CWE-918
Server-Side Request Forgery (SSRF)
Publication date:
03/03/2021
Last modified:
07/03/2025
Description
Microsoft Exchange Server Remote Code Execution Vulnerability
Impact
Base Score 3.x
9.10
Severity 3.x
CRITICAL
Base Score 2.0
7.50
Severity 2.0
HIGH
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:a:microsoft:exchange_server:2013:cumulative_update_21:*:*:*:*:*:* | ||
cpe:2.3:a:microsoft:exchange_server:2013:cumulative_update_22:*:*:*:*:*:* | ||
cpe:2.3:a:microsoft:exchange_server:2013:cumulative_update_23:*:*:*:*:*:* | ||
cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_10:*:*:*:*:*:* | ||
cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_11:*:*:*:*:*:* | ||
cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_12:*:*:*:*:*:* | ||
cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_13:*:*:*:*:*:* | ||
cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_14:*:*:*:*:*:* | ||
cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_15:*:*:*:*:*:* | ||
cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_16:*:*:*:*:*:* | ||
cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_17:*:*:*:*:*:* | ||
cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_18:*:*:*:*:*:* | ||
cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_19:*:*:*:*:*:* | ||
cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_8:*:*:*:*:*:* | ||
cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_9:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- http://packetstormsecurity.com/files/161846/Microsoft-Exchange-2019-SSRF-Arbitrary-File-Write.html
- http://packetstormsecurity.com/files/161938/Microsoft-Exchange-ProxyLogon-Remote-Code-Execution.html
- http://packetstormsecurity.com/files/162610/Microsoft-Exchange-2019-Unauthenticated-Email-Download.html
- http://packetstormsecurity.com/files/162736/Microsoft-Exchange-ProxyLogon-Collector.html
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26855
- http://packetstormsecurity.com/files/161846/Microsoft-Exchange-2019-SSRF-Arbitrary-File-Write.html
- http://packetstormsecurity.com/files/161938/Microsoft-Exchange-ProxyLogon-Remote-Code-Execution.html
- http://packetstormsecurity.com/files/162610/Microsoft-Exchange-2019-Unauthenticated-Email-Download.html
- http://packetstormsecurity.com/files/162736/Microsoft-Exchange-ProxyLogon-Collector.html
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26855