CVE Catalog

CVE-2023-21709

CriticalCVSS 9.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

High risk
2.10%

80th percentile - higher than 80% of all known CVEs

Summary

Elevation of privilege vulnerability in Microsoft Exchange Server. It allows an attacker to elevate their privileges in the system.

Risk Assessment

An attacker with access to a mailbox could gain higher privileges, potentially leading to full control of the Exchange server.

Recommendation

Install the latest security updates for Microsoft Exchange Server.

Original NVD description (English source)

Microsoft Exchange Server Elevation of Privilege Vulnerability

Vulnerability data from NVD (NIST) · CISA KEV · EPSS