VDB
BDU%3A2021-01123
BDU%3A2021-01123
PUBLISHED
CVSS 10 CRITICAL
Уязвимость почтового сервера Microsoft Exchange Server, связанная с недостаточной проверкой поступающих запросов, позволяющая нарушителю осуществить SSRF-атаку
Risk Scores
CVSS 2.0
10
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Microsoft Corp | Microsoft Exchange Server |
Timeline
- Mar 3, 2021 CVE Published
- Sep 11, 2024 PoC Published
- Aug 14, 2026 CVE Updated
- Sep 23, 2026 Security Advisory
References
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26855 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2021-26855 url
- https://www.cybersecurity-help.cz/vdb/SB2021030301 url
- https://msrc-blog.microsoft.com/2021/03/05/microsoft-exchange-server-vulnerabilities-mitigations-march-2021/ url
- http://packetstormsecurity.com/files/161938/Microsoft-Exchange-ProxyLogon-Remote-Code-Execution.html url
- http://packetstormsecurity.com/files/162610/Microsoft-Exchange-2019-Unauthenticated-Email-Download.html url