CVE-2021-33766

KEVHIGH 7.5EPSS 98.1%

Microsoft Exchange Server Information Disclosure Vulnerability

CVSS v3.1: 7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v3.1: 7.3 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS v2.0: 5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
EPSS: 98.14% chance of exploitation in the next 30 days, 100th percentile
CISA KEV: added 2022-01-18
Nuclei: high
Published: 2021-07-14
Updated: 2026-08-10

Proof-of-concept exploits (2)

bhdresh/CVE-2021-3376648★ · 2021-10-14
demossl/CVE-2021-33766-ProxyToken10★ · 2021-09-15

Nuclei templates (1)

projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-33766.yaml

References

Related