PT-2021-2211 · Microsoft · Exchange Server

CVE-2021-27065

·

Published

2021-03-02

·

Updated

2026-09-01

CVSS v2.0

10

High

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server 2013 Microsoft Exchange Server 2016 Microsoft Exchange Server 2019
Description An issue exists due to insufficient input validation, which allows a remote attacker to overwrite arbitrary files in the system and execute arbitrary code.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

RCE

Path traversal

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-20CWE-22

Related Identifiers

BDU:2021-01120
CVE-2021-27065

Affected Products

Exchange Server