Description
An authenticated attacker could leverage improper validation in cmdlet arguments within Microsoft Exchange and perform remote code execution.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| Microsoft Exchange Server 2016 Cumulative Update 21 | Microsoft / Microsoft Exchange Server 2016 Cumulative Update 21 | >= 15.01.0, < 15.01.2308.020 | affected |
| Microsoft Exchange Server 2016 Cumulative Update 22 | Microsoft / Microsoft Exchange Server 2016 Cumulative Update 22 | >= 15.0.0, < 15.01.2375.017 | affected |
| Microsoft Exchange Server 2019 Cumulative Update 10 | Microsoft / Microsoft Exchange Server 2019 Cumulative Update 10 | >= 15.02.0, < 15.02.0792.019 | affected |
| Microsoft Exchange Server 2019 Cumulative Update 11 | Microsoft / Microsoft Exchange Server 2019 Cumulative Update 11 | >= 15.02.0, < 15.02.0986.014 | affected |