CVE-2021-31196
Microsoft Exchange Server Information Disclosure Vulnerability
Published Jul 14, 2021 · updated Aug 10, 2026 · microsoft exchange server
Microsoft Exchange Server contains an information disclosure vulnerability that allows for remote code execution.
Timeline
Detection, updates, and resolution for this record.
Jul 14, 2021 · Catalog
Detected
Microsoft Exchange Server contains an information disclosure vulnerability that allows for remote code execution.
Aug 21, 2024 · CISA KEV
Known exploited
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Sep 11, 2024 · CISA KEV
Remediation due
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Aug 10, 2026 · Catalog
Updated
Microsoft Exchange Server contains an information disclosure vulnerability that allows for remote code execution.
Required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CISA due date Sep 11, 2024
Affected
- cpe microsoft/exchange server2013
- cpe microsoft/exchange server2016
- cpe microsoft/exchange server2019
- vendor Microsoft Exchange Serverversion unspecified
Sources
- CISA KEVCVE-2021-31196
Microsoft Exchange Server contains an information disclosure vulnerability that allows for remote code execution.
cisa.gov - CVE.orgCVE-2021-31196
Official CVE identifier
cve.org - FIRST EPSSCVE-2021-31196
30-day exploitation probability 54.1%
first.org - NIST NVDCVE-2021-31196
Microsoft Exchange Server Remote Code Execution Vulnerability
nvd.nist.gov