CVE-2022-21846 — Vulnetix

Try Vulnetix Request Demo

CVE-2022-21846 PUBLISHED CVSS 9 CRITICAL

Microsoft Exchange Server Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-21855, CVE-2022-21969.

EPSS 1.53% · 81.2th percentile

Risk Scores

CVSS v3.1

9

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C

EPSS Score

1.53%

81.2th percentile

Affected Products

Vendor	Product	Versions
Microsoft	Microsoft Exchange Server 2016 Cumulative Update 22	15.0.0
Microsoft	Microsoft Exchange Server 2019 Cumulative Update 10	15.02.0
Microsoft	Microsoft Exchange Server 2013 Cumulative Update 23	15.00.0
Microsoft	Microsoft Exchange Server 2016 Cumulative Update 21	15.01.0
Microsoft	Microsoft Exchange Server 2019 Cumulative Update 11	15.02.0
microsoft	exchange_server	15.02.0, 2013, 2016

Timeline

Jan 11, 2022 CVE Published
Feb 8, 2022 EPSS Score
Apr 1, 2022 EPSS Score
Jul 15, 2022 EPSS Score
Sep 4, 2022 EPSS Score
Dec 17, 2022 EPSS Score
Feb 7, 2023 EPSS Score
Mar 7, 2023 EPSS Score
May 22, 2023 EPSS Score
Jul 13, 2023 EPSS Score
Oct 24, 2023 EPSS Score
Dec 15, 2023 EPSS Score

References

https://msrc.microsoft.com/update-guide/ advisory
Microsoft Exchange Server Remote Code Execution Vulnerability vendor-advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21846 url
https://nvd.nist.gov/vuln/detail/CVE-2022-21846 advisory

Open in Interactive Console →