A remote code execution vulnerability exists in Microsoft Exchange through the deserialization of metadata via PowerShell, aka 'Microsoft Exchange Remote Code Execution Vulnerability'.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Microsoft Exchange Server 2019
Vendor
Microsoft
Product
Microsoft Exchange Server 2019
Platforms
Unknown
Default status
Unknown
Microsoft Exchange Server 2019 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
Cumulative Update 2
affected
Unavailable
Unavailable
Unavailable
None listed
Microsoft Exchange Server 2016
Vendor
Microsoft
Product
Microsoft Exchange Server 2016
Platforms
Unknown
Default status
Unknown
Microsoft Exchange Server 2016 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
Cumulative Update 13
affected
Unavailable
Unavailable
Unavailable
None listed
Microsoft Exchange Server 2013
Vendor
Microsoft
Product
Microsoft Exchange Server 2013
Platforms
Unknown
Default status
Unknown
Microsoft Exchange Server 2013 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
Cumulative Update 23
affected
Unavailable
Unavailable
Unavailable
None listed
Microsoft Exchange Server 2019 Cumulative Update 3
Vendor
Microsoft
Product
Microsoft Exchange Server 2019 Cumulative Update 3
Platforms
Unknown
Default status
Unknown
Microsoft Exchange Server 2019 Cumulative Update 3 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
unspecified
affected
Unavailable
Unavailable
Unavailable
None listed
Microsoft Exchange Server 2016 Cumulative Update 14
Vendor
Microsoft
Product
Microsoft Exchange Server 2016 Cumulative Update 14
Platforms
Unknown
Default status
Unknown
Microsoft Exchange Server 2016 Cumulative Update 14 · Scoped product and version facts