coldbraid

CVE-2021-27065 Microsoft Exchange Server

Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain.

CVSS
not scored

CWE-39

On CISA’s exploited list

Microsoft Exchange Server Remote Code Execution Vulnerability

Added
2021-11-03
Federal patch deadline
2022-05-03
Ransomware use
known

Actors known to use it (MITRE ATT&CK)