CVE-2022-21855 — Vulnetix

Try Vulnetix Request Demo

CVE-2022-21855 PUBLISHED CVSS 9 CRITICAL

Microsoft Exchange Server Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-21846, CVE-2022-21969.

EPSS 1.53% · 81.2th percentile

Risk Scores

CVSS v3.1

9

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C

EPSS Score

1.53%

81.2th percentile

Affected Products

Vendor	Product	Versions
Microsoft	Microsoft Exchange Server 2016 Cumulative Update 22	15.0.0
Microsoft	Microsoft Exchange Server 2019 Cumulative Update 11	15.02.0
Microsoft	Microsoft Exchange Server 2016 Cumulative Update 21	15.01.0
microsoft	exchange_server	2019, 2016, 2019
Microsoft	Microsoft Exchange Server 2013 Cumulative Update 23	15.00.0
Microsoft	Microsoft Exchange Server 2019 Cumulative Update 10	15.02.0

Timeline

Jan 11, 2022 CVE Published
Feb 8, 2022 EPSS Score
Apr 1, 2022 EPSS Score
May 23, 2022 EPSS Score
Sep 4, 2022 EPSS Score
Oct 26, 2022 EPSS Score
Dec 17, 2022 EPSS Score
Feb 7, 2023 EPSS Score
Mar 7, 2023 EPSS Score
May 22, 2023 EPSS Score
Jul 13, 2023 EPSS Score
Sep 2, 2023 EPSS Score

References

https://msrc.microsoft.com/update-guide/ advisory
Microsoft Exchange Server Remote Code Execution Vulnerability vendor-advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21855 url
https://nvd.nist.gov/vuln/detail/CVE-2022-21855 advisory

Open in Interactive Console →