CVE Catalog
Actively exploited in the wild
Microsoft Exchange Server Information Disclosure Vulnerability
Microsoft - Exchange Server · Listed in the CISA KEV since 2024-08-21. This indicates confirmed attacks in production environments.
Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CVE-2021-31196
HighCVSS 7.2KEVExploitation Probability (EPSS)
Very high risk46.38%
99th percentile - higher than 99% of all known CVEs
Summary
A remote code execution vulnerability in Microsoft Exchange Server.
Risk Assessment
A remote attacker could exploit this to execute arbitrary code on the server, potentially leading to full server compromise and data breach.
Recommendation
Apply the latest security updates for Microsoft Exchange Server.
Original NVD description (English source)
Microsoft Exchange Server Remote Code Execution Vulnerability