Vulnerability Database

296,733

Total vulnerabilities in the database

CVE-2022-21846

Microsoft Exchange Server Remote Code Execution Vulnerability

Published: Jan 11, 2022
Updated: May 4, 2025
CVE: CVE-2022-21846
Severity: High
Exploit:

CVSS v2:

Severity: High
Score: 8.3
AV:A/AC:L/Au:N/C:C/I:C/A:C

CWEs:

CWE-94

Affected Software
References

Software	From	Fixed in
microsoft / exchange_server	2013-cumulative_update_23	2013-cumulative_update_23.x
microsoft / exchange_server	2016-cumulative_update_21	2016-cumulative_update_21.x
microsoft / exchange_server	2019-cumulative_update_10	2019-cumulative_update_10.x
microsoft / exchange_server	2016-cumulative_update_22	2016-cumulative_update_22.x
microsoft / exchange_server	2019-cumulative_update_11	2019-cumulative_update_11.x

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime