A remote code execution vulnerability exists in Microsoft Exchange through the deserialization of metadata via PowerShell, aka Microsoft Exchange Remote Code Execution Vulnerability.
The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Exchange_server | Microsoft | 2013-cumulative_update_23 (including) | 2013-cumulative_update_23 (including) |
| Exchange_server | Microsoft | 2016-cumulative_update_13 (including) | 2016-cumulative_update_13 (including) |
| Exchange_server | Microsoft | 2016-cumulative_update_14 (including) | 2016-cumulative_update_14 (including) |
| Exchange_server | Microsoft | 2019-cumulative_update_2 (including) | 2019-cumulative_update_2 (including) |
| Exchange_server | Microsoft | 2019-cumulative_update_3 (including) | 2019-cumulative_update_3 (including) |