Description
Microsoft Exchange Server Remote Code Execution Vulnerability
Published: 2021-03-03
Score: 7.8 High
EPSS: 99.9% High
KEV: Yes
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No solution or workaround provided in the CVE record.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 01 Oct 2026 23:30:00 +0200

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'active', 'Technical Impact': 'total'}, 'version': '2.0.3'}

ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'active', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Wed, 19 Aug 2026 21:30:00 +0200

Type Values Removed Values Added
CPEs cpe:2.3:a:microsoft:exchange_server:2013:cumulative_update_22:*:*:*:*:*:*
cpe:2.3:a:microsoft:exchange_server:2013:cumulative_update_23:*:*:*:*:*:*

Wed, 19 Aug 2026 18:45:00 +0200

Type Values Removed Values Added
CPEs cpe:2.3:a:microsoft:exchange_server:2013:cumulative_update_1:*:*:*:*:*:*
cpe:2.3:a:microsoft:exchange_server:2013:cumulative_update_22:*:*:*:*:*:*
cpe:2.3:a:microsoft:exchange_server:2013:cumulative_update_23:*:*:*:*:*:*
cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_9:*:*:*:*:*:*
cpe:2.3:a:microsoft:exchange_server:2019:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:exchange_server:*:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:exchange_server:*:cumulative_update_10:*:*:*:*:*:*
cpe:2.3:a:microsoft:exchange_server:*:cumulative_update_11:*:*:*:*:*:*
cpe:2.3:a:microsoft:exchange_server:*:cumulative_update_12:*:*:*:*:*:*
cpe:2.3:a:microsoft:exchange_server:*:cumulative_update_13:*:*:*:*:*:*
cpe:2.3:a:microsoft:exchange_server:*:cumulative_update_14:*:*:*:*:*:*
cpe:2.3:a:microsoft:exchange_server:*:cumulative_update_15:*:*:*:*:*:*
cpe:2.3:a:microsoft:exchange_server:*:cumulative_update_16:*:*:*:*:*:*
cpe:2.3:a:microsoft:exchange_server:*:cumulative_update_17:*:*:*:*:*:*
cpe:2.3:a:microsoft:exchange_server:*:cumulative_update_18:*:*:*:*:*:*
cpe:2.3:a:microsoft:exchange_server:*:cumulative_update_19:*:*:*:*:*:*
cpe:2.3:a:microsoft:exchange_server:*:cumulative_update_1:*:*:*:*:*:*
cpe:2.3:a:microsoft:exchange_server:*:cumulative_update_21:*:*:*:*:*:*
cpe:2.3:a:microsoft:exchange_server:*:cumulative_update_22:*:*:*:*:*:*
cpe:2.3:a:microsoft:exchange_server:*:cumulative_update_23:*:*:*:*:*:*
cpe:2.3:a:microsoft:exchange_server:*:cumulative_update_2:*:*:*:*:*:*
cpe:2.3:a:microsoft:exchange_server:*:cumulative_update_3:*:*:*:*:*:*
cpe:2.3:a:microsoft:exchange_server:*:cumulative_update_4:*:*:*:*:*:*
cpe:2.3:a:microsoft:exchange_server:*:cumulative_update_5:*:*:*:*:*:*
cpe:2.3:a:microsoft:exchange_server:*:cumulative_update_6:*:*:*:*:*:*
cpe:2.3:a:microsoft:exchange_server:*:cumulative_update_7:*:*:*:*:*:*
cpe:2.3:a:microsoft:exchange_server:*:cumulative_update_8:*:*:*:*:*:*
cpe:2.3:a:microsoft:exchange_server:*:cumulative_update_9:*:*:*:*:*:*
References

Wed, 22 Oct 2025 02:15:00 +0200


Tue, 21 Oct 2025 22:30:00 +0200


Tue, 21 Oct 2025 21:30:00 +0200


Tue, 15 Jul 2025 15:45:00 +0200

Type Values Removed Values Added
Metrics epss

{'score': 0.94347}

epss

{'score': 0.94354}


Tue, 04 Feb 2025 21:15:00 +0100

Type Values Removed Values Added
Metrics kev

{'dateAdded': '2021-11-03'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'active', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Subscriptions

Microsoft Exchange Server
cve-icon MITRE

Status: PUBLISHED

Assigner: microsoft

Published:

Updated: 2026-10-01T20:13:32.360Z

Reserved: 2021-02-10T00:00:00.000Z

Link: CVE-2021-27065

cve-icon Vulnrichment

Updated: 2024-08-03T20:40:47.231Z

cve-icon NVD

Status : Analyzed

Published: 2021-03-03T00:15:12.307

Modified: 2026-10-01T21:17:17.040

Link: CVE-2021-27065

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses
  • CWE-22

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')