Firetruck

CVE-2021-31207

KEV · Ransomware
Updated Oct 21, 2025 · PUBLISHED
View KEV entry →

Description

Microsoft Exchange Server contains an unspecified vulnerability that allows for security feature bypass.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
Microsoft Exchange Server 2013 Cumulative Update 23Microsoft / Microsoft Exchange Server 2013 Cumulative Update 23>= 15.00.0, < 15.00.1497.018affected
Microsoft Exchange Server 2016 Cumulative Update 19Microsoft / Microsoft Exchange Server 2016 Cumulative Update 19>= 15.01.0, < 15.01.2176.014affected
Microsoft Exchange Server 2016 Cumulative Update 20Microsoft / Microsoft Exchange Server 2016 Cumulative Update 20>= 15.01.0, < 15.01.2242.010affected
Microsoft Exchange Server 2019 Cumulative Update 8Microsoft / Microsoft Exchange Server 2019 Cumulative Update 8>= 15.02.0, < 15.02.0792.015affected
Microsoft Exchange Server 2019 Cumulative Update 9Microsoft / Microsoft Exchange Server 2019 Cumulative Update 9>= 15.02.0, < 15.02.0858.012affected