CVE-2021-26855

Description

Microsoft Exchange Server Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-26412, CVE-2021-26854, CVE-2021-26857, CVE-2021-26858, CVE-2021-27065, CVE-2021-27078.

From the Tenable Blog

CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, CVE-2021-27065: Four Zero-Day Vulnerabilities in Microsoft Exchange Server Exploited in the Wild

Published: 2021-03-03

Four zero-day vulnerabilities in Microsoft Exchange servers have been used in chained attacks in the wild.

References

http://packetstormsecurity.com/files/161846/Microsoft-Exchange-2019-SSRF-Arbitrary-File-Write.html

http://packetstormsecurity.com/files/161938/Microsoft-Exchange-ProxyLogon-Remote-Code-Execution.html

http://packetstormsecurity.com/files/162610/Microsoft-Exchange-2019-Unauthenticated-Email-Download.html

http://packetstormsecurity.com/files/162736/Microsoft-Exchange-ProxyLogon-Collector.html

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26855

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3