KLA12419 Multiple vulnerabilities in Microsoft Exchange Server

Multiple vulnerabilities were found in Microsoft Exchange Server. Malicious users can exploit this vulnerability to execute arbitrary code.

Original advisories

CVE-2022-21855

CVE-2022-21846

CVE-2022-21969

Related products

Microsoft-Exchange-Server

CVE list

CVE-2022-21855 critical

CVE-2022-21846 critical

CVE-2022-21969 critical

KB list

5008631

Solution

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

Affected Products

• Microsoft Exchange Server 2013 Cumulative Update 23Microsoft Exchange Server 2016 Cumulative Update 21Microsoft Exchange Server 2016 Cumulative Update 22Microsoft Exchange Server 2019 Cumulative Update 10Microsoft Exchange Server 2019 Cumulative Update 11