CVE-2021-31196

Microsoft Exchange Server Information Disclosure

7.2 HIGHActively exploited (CISA KEV)EPSS 54.1%

Published14 Jul 2021
Added to CISA KEV21 Aug 2024
Remediation due11 Sept 2024

Description

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS 3.1 breakdown

Attack vectorNetwork

Attack complexityLow

Privileges requiredHigh

User interactionNone

ScopeUnchanged

ConfidentialityHigh

IntegrityHigh

AvailabilityHigh

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

Microsoft Exchange Server2013 · 2016 · 2019

Remediation

No fixed version is recorded in the NVD data. Check the vendor advisory for the latest guidance.

Patch & vendor advisories

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-31196PatchVendor Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31196PatchVendor Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-31196US Government Resource

Frequently asked

Is CVE-2021-31196 being actively exploited?

Yes. CVE-2021-31196 is listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added 21 Aug 2024.

How severe is CVE-2021-31196?

CVE-2021-31196 has a CVSS 3.1 base score of 7.2, rated high. EPSS estimates a 54.1% probability of exploitation.

Which products are affected by CVE-2021-31196?

Affected products include Microsoft Exchange Server.

How do I fix CVE-2021-31196?

Apply the vendor's patch or advisory guidance, then verify no affected versions remain across your devices.

How Secuno handles this

Secuno correlates vulnerabilities like CVE-2021-31196 against the real software inventory on every managed device, as each hourly inventory arrives. Rather than a static severity, each match is scored in context: exploit availability, EPSS, the asset's exposure, and business criticality decide where it lands in the queue. Because it is on the CISA KEV list, a risk for it never ranks below high, and the update that fixes it moves to the Emergency patch lane. If an affected version is present anywhere across your portfolio, it surfaces automatically with a prioritised remediation path.

See how prioritisation works Book a demo

Running Microsoft 365?

Patching is one half. Scan your domain and check MFA, legacy authentication, admin roles and mail forwarding in two minutes, with a fix for every gap.

Run the free Microsoft 365 check

Data from the NVD, CISA KEV catalog and FIRST EPSS. CVSS 3.1 base score shown where available.