CISA KEV

CVE-2021-31196

Microsoft Exchange Server Information Disclosure Vulnerability

Microsoft Exchange Server contains an information disclosure vulnerability that allows for remote code execution.

VendorMicrosoft

ProductExchange Server

EPSS54.1%

Added to KEVAug 21, 2024

Remediation DueSep 11, 2024

Known Ransomware UseUnknown

Required Action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

From Disclosure to Action

Know how quickly you need to move.

For CVE-2021-31196, added to the catalogue on Aug 21, 2024 with a remediation deadline of Sep 11, 2024.

Added to KEVAug 21, 2024

Seraph AlertSame day

Remediation DueSep 11, 2024

ValidationOngoing

Overdue777 days overdue

Recommended action: Apply vendor remediation guidance.

Available for technologies you monitor inside Seraph CTI.

Surfaced automatically when a tracked actor is linked to this CVE.

Shown when this vendor/product is relevant to your industry.

Campaign and indicator context, where Seraph analysts have published it.

Declare your technology stack inside Seraph CTI and get notified the moment a KEV entry matches it.