CVE-2023-21707

Remote code execution vulnerability in Microsoft Exchange Server. Allows an attacker to execute arbitrary code in the context of the Exchange server.

Risk includes takeover of the mail server, access to user mailboxes, data theft, and further internal attacks. The vulnerability may be exploited remotely.

Apply security updates from Microsoft for Exchange Server. Restrict access to the server and monitor logs for suspicious activity.