KEVIntel
Vulnerability detail
Enriched intelligence for a single CVE
7.2
CVSS
High
High
CVE-2021-31196
PUBLISHEDMicrosoft Exchange Server Remote Code Execution Vulnerability
Exploited in the wild
Remote
Low complexity
No user interaction
- Vendor
- Microsoft
- Product
- Microsoft Exchange Server 2019 Cumulative Update 9, Microsoft Exchange Server 2016 Cumulative Update 20, Microsoft Exchange Server 2013 Cumulative Update 23, Microsoft Exchange Server 2016 Cumulative Update 21, Microsoft Exchange Server 2019 Cumulative Update 10
- Published
- Jul 14, 2021
- EPSS
- —
Description
Microsoft Exchange Server Remote Code Execution Vulnerability
cisa
microsoft
nessus_scanner
CVSS scores
CVSS v3.1
7.2 High
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Exploitation status
Exploited in the wild
Recorded 2024-08-21 00:00:00 UTC · Source
SSVC decision points
- Exploitation
- active
- Automatable
- Yes
- Technical impact
- total
Known exploited vulnerability sources
Catalogues that list this CVE as a known exploited vulnerability.
| Source | Added |
|---|---|
| CISA | Aug 21, 2024 |
Scanner integrations
| Scanner | Reference | Detected |
|---|---|---|
| Nessus | https://www.tenable.com/plugins/nessus/151664 | Jun 02, 2025 |
Timeline
-
CVE ID Reserved
-
CVE Published to Public
-
Added to KEVIntel
-
Detected by Nessus