Description
Microsoft Exchange Server contains a deserialization of untrusted data that allows an authenticated attacker to achieve remote code execution.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| Microsoft Exchange Server 2013 Cumulative Update 23 | Microsoft / Microsoft Exchange Server 2013 Cumulative Update 23 | >= 15.00.0, < 15.00.1497.047 | affected |
| Microsoft Exchange Server 2016 Cumulative Update 23 | Microsoft / Microsoft Exchange Server 2016 Cumulative Update 23 | >= 15.01.0, < 15.01.2507.021 | affected |
| Microsoft Exchange Server 2019 Cumulative Update 11 | Microsoft / Microsoft Exchange Server 2019 Cumulative Update 11 | >= 15.02.0, < 15.02.0986.041 | affected |
| Microsoft Exchange Server 2019 Cumulative Update 12 | Microsoft / Microsoft Exchange Server 2019 Cumulative Update 12 | >= 15.02.0, < 15.02.1118.025 | affected |