Security Lab

Множественные уязвимости в Microsoft Exchange Server

Дата публикации:11.01.2022
Всего просмотров:373
Опасность:
Средняя
Наличие исправления: Да
Количество уязвимостей:3
CVSSv3.1 рейтинг: 9 [CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C]
9 [CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C]
9 [CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE ID: CVE-2022-21855
CVE-2022-21969
CVE-2022-21846
Вектор эксплуатации: Локальная сеть
Воздействие: Компрометация системы
CWE ID: Нет данных
Наличие эксплоита: Нет данных
Уязвимые продукты: Microsoft Exchange Server 2016
Microsoft Exchange Server 2010
Microsoft Exchange Server 2013
Microsoft Exchange Server MAPI Client and Collaboration Data Objects 1.2.1
Microsoft Exchange Server 2000
Microsoft Exchange Server MAPI Client and Collaboration Data Objects 2.x
Microsoft Exchange Server 2007
Microsoft Exchange Server 2003
Уязвимые версии: Microsoft Exchange Server версии 2013 Cumulative Update 23, 2019, 2019 Cumulative Update 8, 2019 Cumulative Update 7, 2019 Cumulative Update 6, 2019 Cumulative Update 5, 2019 Cumulative Update 4, 2019 Cumulative Update 3, 2019 Cumulative Update 2, 2019 Cumulative Update 1, 2016, 2016 Cumulative Update 19, 2016 Cumulative Update 18, 2016 Cumulative Update 17, 2016 Cumulative Update 16, 2016 Cumulative Update 15, 2016 Cumulative Update 14, 2016 Cumulative Update 13, 2016 Cumulative Update 12, 2016 Cumulative Update 11, 2016 Cumulative Update 10, 2016 Cumulative Update 9, 2016 Cumulative Update 8, 2016 Cumulative Update 7, 2016 Cumulative Update 6, 2016 Cumulative Update 5, 2016 Cumulative Update 4, 2016 Cumulative Update 3, 2016 Cumulative Update 2, 2016 Cumulative Update 1, 2013 Cumulative Update 22, 2013 Cumulative Update 21, 2013 Cumulative Update 20, 2013 Cumulative Update 19, 2013 Cumulative Update 18, 2013 Cumulative Update 17, 2013 Cumulative Update 16, 2013 Cumulative Update 15, 2013 Cumulative Update 14, 2013 Cumulative Update 13, 2013 Cumulative Update 12, 2013 Cumulative Update 11, 2013 Cumulative Update 10, 2013 Cumulative Update 9, 2013 Cumulative Update 8, 2013 Cumulative Update 7, 2013 Cumulative Update 6, 2013 Cumulative Update 5, 2013 Cumulative Update 4, 2013 Cumulative Update 3, 2013 Cumulative Update 2, 2013 Cumulative Update 1, 2013 Service Pack 1, 2013
Описание:

Множественные уязвимости в Microsoft Exchange Server

Решение: Установите исправление с сайта производителя.
Ссылки: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21855
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21969
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21846