CVE-2021-1730
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2021
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
Microsoft Exchange Server Spoofing Vulnerability
<p>A spoofing vulnerability exists in Microsoft Exchange Server which could result in an attack that would allow a malicious actor to impersonate the user.</p> <p>This update addresses this vulnerability.</p> <p>To prevent these types of attacks, Microsoft recommends customers to download inline images from different DNSdomains than the rest of OWA. Please see further instructions in the FAQ to put in place this mitigations.</p>
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Microsoft Exchange Server 2019 Cumulative Update 7
- Vendor
- Microsoft
- Product
- Microsoft Exchange Server 2019 Cumulative Update 7
- Platforms
- x64-based Systems
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 15.02.0 | affected | custom | publication | Unavailable | None listed |
Microsoft Exchange Server 2016 Cumulative Update 18
- Vendor
- Microsoft
- Product
- Microsoft Exchange Server 2016 Cumulative Update 18
- Platforms
- x64-based Systems
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 15.01.0 | affected | custom | publication | Unavailable | None listed |