CVE-2024-21410 | Attaxion

CISA Known Exploited Vulnerability (KEV)

Name

Microsoft Exchange Server Privilege Escalation Vulnerability

Exploit added

February 15, 2024

Action due

March 7, 2024

Action required

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Microsoft Exchange Server Elevation of Privilege Vulnerability

CWE-ID	CWE Name
CWE-287	Improper Authentication

cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_14::::::
cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_13::::::
cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_23::::::

Source:
NVD

Published:
February 13, 2024

Updated:
June 10, 2024

Base score:
9.8

Severity:

CRITICAL

Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Not defined