CVE-2021-34470
Microsoft Exchange Server Elevation of Privilege Vulnerability
HIGH 8.0EPSS 4.4%
Microsoft Exchange Server Elevation of Privilege Vulnerability
- Affected
- Microsoft · Microsoft Exchange Server 2013 Cumulative Update 23 · Microsoft Exchange Server 2016 Cumulative Update 21 · Microsoft Exchange Server 2019 Cumulative Update 10
- CVSS v3.1 NVD
- 8.0 HIGH
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS v2.0 NVD
- 5.2 MEDIUM
AV:A/AC:L/Au:S/C:P/I:P/A:P - EPSS
- 4.38% chance of exploitation in the next 30 days, 91st percentile
- Published
- 2021-07-14
- Updated
- 2026-08-10
Proof-of-concept exploits (2)
- technion/CVE-2021-34470scanner2★ · 2021-07-29
- tmenochet/ADTamper1★ · 2024-05-21
Security advisories
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34470
- http://packetstormsecurity.com/files/163706/Microsoft-Exchange-AD-Schema-Misconfiguration…