CVE-2021-42321—Microsoft Exchange Server Remote Code Execution Vulnerability

PUBLISHEDvulnerability record
2021-11-17 · last modified June 21, 2025

Metadata

CVE ID:
CVE-2021-42321
Project:
Microsoft
Product:
Exchange
Date Added:
2021-11-17
Due Date:
2021-12-01
Last Updated:
June 21, 2025

Vulnerability Name

Microsoft Exchange Server Remote Code Execution Vulnerability

Description

An authenticated attacker could leverage improper validation in cmdlet arguments within Microsoft Exchange and perform remote code execution.

Known To Be Used in Ransomware Campaigns?

Ransomware Status:
KNOWN

Action

Apply updates per vendor instructions.

Additional Notes

  • https://nvd.nist.gov/vuln/detail/CVE-2021-42321

Related Weaknesses

browse all CVEs