CVE: CVE-2021-26858 - CVE-Search

CVE Details for CVE: CVE-2021-26858

Summary

Microsoft Exchange Server Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-26412, CVE-2021-26854, CVE-2021-26855, CVE-2021-26857, CVE-2021-27065, CVE-2021-27078.

Timestamps
Last major update	08-03-2021 - 20:46
Published	03-03-2021 - 00:15
Last modified	08-03-2021 - 20:46

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26858

Vulnerable Configurations

cpe:2.3:a:microsoft:exchange_server:2013:cumulative_update_23:*:*:*:*:*:*
cpe:2.3:a:microsoft:exchange_server:2013:cumulative_update_23:*:*:*:*:*:*
cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_18:*:*:*:*:*:*
cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_18:*:*:*:*:*:*
cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_19:*:*:*:*:*:*
cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_19:*:*:*:*:*:*
cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_7:*:*:*:*:*:*
cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_7:*:*:*:*:*:*
cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_8:*:*:*:*:*:*
cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_8:*:*:*:*:*:*

CAPEC

Click the CAPEC title to display a description

CWE

NVD-CWE-noinfo

CVSS

Base

6.8

Impact

6.4

Exploitability

8.6

Access

Vector	Complexity	Authentication
NETWORK	MEDIUM	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	PARTIAL

CVSS3

Base

7.8

Impact

5.9

Exploitability

1.8

Access

Attack Complexity	Attack vector	Privileges Required	Scope	User Interaction
LOW	LOCAL	NONE	UNCHANGED	REQUIRED

Impact

Confidentiality	Integrity	Availability
HIGH	HIGH	HIGH

VIA4 references

cvss-vector via4

AV:N/AC:M/Au:N/C:P/I:P/A:P

cvss3-vector via4

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H