CVE-2022-21855

CRITICAL

Microsoft Exchange Server - Remote Code Execution

Title source: llm
STIX 2.1

Description

Microsoft Exchange Server Remote Code Execution Vulnerability

References (2)

Core 2

Scores

CVSS v3 9.0
EPSS 0.0093
EPSS Percentile 56.8%
Attack Vector ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Details

Status published
Products (3)
microsoft/exchange_server 2013 cumulative_update_23
microsoft/exchange_server 2016 cumulative_update_21 (2 CPE variants)
microsoft/exchange_server 2019 cumulative_update_10 (2 CPE variants)
Published Jan 11, 2022
Tracked Since Feb 18, 2026