CVE-2021-34523

Microsoft Exchange Server Privilege Escalation Vulnerability

9.0
CVSS 3.1
100.0 %
EPSS (current)
2021-11-03
KEV addition
Yes
Ransomware

Timeline

Publication, first public exploit and KEV addition on a day axis.

Key facts

Vendor / product: Microsoft / Exchange Server

Published: 2021-07-14 · Due (CISA): 2021-11-17

CWE: – · EU list: no

Exploit references (metadata only)

SourceReferenceTitleDate
metasploitexploit/windows/http/exchange_proxyshell_rceexploit/windows/http/exchange_proxyshell_rce2021-04-06

References only — no downloads or instructions.

Sources