{"history":[{"alert":0,"cve":"CVE-2023-21529","id":22450,"kind":"epss","observed_at":1794500401,"payload":"{\"date\": \"2026-11-12\", \"epss\": 0.59294, \"percentile\": 0.99132}"},{"alert":0,"cve":"CVE-2023-21529","id":20069,"kind":"epss","observed_at":1794327601,"payload":"{\"date\": \"2026-11-10\", \"epss\": 0.59294, \"percentile\": 0.99127}"},{"alert":0,"cve":"CVE-2023-21529","id":18035,"kind":"epss","observed_at":1794241201,"payload":"{\"date\": \"2026-11-09\", \"epss\": 0.59294, \"percentile\": 0.99125}"},{"alert":0,"cve":"CVE-2023-21529","id":16099,"kind":"epss","observed_at":1794154800,"payload":"{\"date\": \"2026-11-08\", \"epss\": 0.59294, \"percentile\": 0.99125}"},{"alert":0,"cve":"CVE-2023-21529","id":14077,"kind":"epss","observed_at":1794068402,"payload":"{\"date\": \"2026-11-07\", \"epss\": 0.59294, \"percentile\": 0.99124}"},{"alert":0,"cve":"CVE-2023-21529","id":11859,"kind":"epss","observed_at":1793982001,"payload":"{\"date\": \"2026-11-06\", \"epss\": 0.59294, \"percentile\": 0.99123}"},{"alert":0,"cve":"CVE-2023-21529","id":9845,"kind":"epss","observed_at":1793938800,"payload":"{\"date\": \"2026-11-05\", \"epss\": 0.59294, \"percentile\": 0.99122}"},{"alert":1,"cve":"CVE-2023-21529","id":8206,"kind":"cna","observed_at":1793830801,"payload":"{\"containers\": {\"adp\": [{\"providerMetadata\": {\"dateUpdated\": \"2024-08-02T09:44:01.279Z\", \"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\"}, \"references\": [{\"name\": \"Microsoft Exchange Server Remote Code Execution Vulnerability\", \"tags\": [\"vendor-advisory\", \"x_transferred\"], \"url\": \"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21529\"}], \"title\": \"CVE Program Container\"}, {\"metrics\": [{\"other\": {\"content\": {\"id\": \"CVE-2023-21529\", \"options\": [{\"Exploitation\": \"active\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"role\": \"CISA Coordinator\", \"timestamp\": \"2023-02-15T00:00:00+00:00\", \"version\": \"2.0.3\"}, \"type\": \"ssvc\"}}, {\"other\": {\"content\": {\"dateAdded\": \"2026-04-13\", \"reference\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-21529\"}, \"type\": \"kev\"}}], \"providerMetadata\": {\"dateUpdated\": \"2026-04-14T03:55:24.065Z\", \"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\"}, \"references\": [{\"tags\": [\"vendor-advisory\"], \"url\": \"https://www.microsoft.com/en-us/security/blog/2026/04/06/storm-1175-focuses-gaze-on-vulnerable-web-facing-assets-in-high-tempo-medusa-ransomware-operations/\"}, {\"tags\": [\"government-resource\"], \"url\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-21529\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2026-04-13T00:00:00.000Z\", \"value\": \"CVE-2023-21529 added to CISA KEV\"}], \"title\": \"CISA ADP Vulnrichment\"}], \"cna\": {\"affected\": [{\"platforms\": [\"x64-based Systems\"], \"product\": \"Microsoft Exchange Server 2013 Cumulative Update 23\", \"vendor\": \"Microsoft\", \"versions\": [{\"lessThan\": \"15.00.1497.047\", \"status\": \"affected\", \"version\": \"15.00.0\", \"versionType\": \"custom\"}]}, {\"platforms\": [\"x64-based Systems\"], \"product\": \"Microsoft Exchange Server 2016 Cumulative Update 23\", \"vendor\": \"Microsoft\", \"versions\": [{\"lessThan\": \"15.01.2507.021\", \"status\": \"affected\", \"version\": \"15.01.0\", \"versionType\": \"custom\"}]}, {\"platforms\": [\"x64-based Systems\"], \"product\": \"Microsoft Exchange Server 2019 Cumulative Update 11\", \"vendor\": \"Microsoft\", \"versions\": [{\"lessThan\": \"15.02.0986.041\", \"status\": \"affected\", \"version\": \"15.02.0\", \"versionType\": \"custom\"}]}, {\"platforms\": [\"x64-based Systems\"], \"product\": \"Microsoft Exchange Server 2019 Cumulative Update 12\", \"vendor\": \"Microsoft\", \"versions\": [{\"lessThan\": \"15.02.1118.025\", \"status\": \"affected\", \"version\": \"15.02.0\", \"versionType\": \"custom\"}]}], \"cpeApplicability\": [{\"nodes\": [{\"cpeMatch\": [{\"criteria\": \"cpe:2.3:a:microsoft:exchange_server:*:cumulative_update_12:*:*:*:*:*:*\", \"versionEndExcluding\": \"15.02.1118.025\", \"versionStartIncluding\": \"15.02.0\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:a:microsoft:exchange_server:*:cumulative_update_11:*:*:*:*:*:*\", \"versionEndExcluding\": \"15.02.0986.041\", \"versionStartIncluding\": \"15.02.0\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:a:microsoft:exchange_server:*:cumulative_update_23:*:*:*:*:*:*\", \"versionEndExcluding\": \"15.00.1497.047\", \"versionStartIncluding\": \"15.00.0\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:a:microsoft:exchange_server:*:cumulative_update_23:*:*:*:*:*:*\", \"versionEndExcluding\": \"15.01.2507.021\", \"versionStartIncluding\": \"15.01.0\", \"vulnerable\": true}], \"negate\": false, \"operator\": \"OR\"}]}], \"datePublic\": \"2023-02-14T08:00:00.000Z\", \"descriptions\": [{\"lang\": \"en-US\", \"value\": \"Microsoft Exchange Server Remote Code Execution Vulnerability\"}], \"metrics\": [{\"cvssV3_1\": {\"baseScore\": 8.8, \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C\", \"version\": \"3.1\"}, \"format\": \"CVSS\", \"scenarios\": [{\"lang\": \"en-US\", \"value\": \"GENERAL\"}]}], \"problemTypes\": [{\"descriptions\": [{\"cweId\": \"CWE-502\", \"description\": \"CWE-502: Deserialization of Untrusted Data\", \"lang\": \"en-US\", \"type\": \"CWE\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2026-08-19T16:26:33.854Z\", \"orgId\": \"f38d906d-7342-40ea-92c1-6c4a2c6478c8\", \"shortName\": \"microsoft\"}, \"references\": [{\"name\": \"Microsoft Exchange Server Remote Code Execution Vulnerability\", \"tags\": [\"vendor-advisory\", \"patch\"], \"url\": \"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21529\"}], \"title\": \"Microsoft Exchange Server Remote Code Execution Vulnerability\"}}, \"cveMetadata\": {\"assignerOrgId\": \"f38d906d-7342-40ea-92c1-6c4a2c6478c8\", \"assignerShortName\": \"microsoft\", \"cveId\": \"CVE-2023-21529\", \"datePublished\": \"2023-02-14T19:33:00.590Z\", \"dateReserved\": \"2022-12-01T14:00:11.197Z\", \"dateUpdated\": \"2026-08-19T16:26:33.854Z\", \"state\": \"PUBLISHED\"}, \"dataType\": \"CVE_RECORD\", \"dataVersion\": \"5.2\"}"},{"alert":0,"cve":"CVE-2023-21529","id":7393,"kind":"epss","observed_at":1793809200,"payload":"{\"date\": \"2026-11-04\", \"epss\": 0.59294, \"percentile\": 0.99122}"},{"alert":0,"cve":"CVE-2023-21529","id":5170,"kind":"epss","observed_at":1793722800,"payload":"{\"date\": \"2026-11-03\", \"epss\": 0.59294, \"percentile\": 0.9912}"},{"alert":0,"cve":"CVE-2023-21529","id":2952,"kind":"epss","observed_at":1793665375,"payload":"{\"date\": \"2026-11-02\", \"epss\": 0.59294, \"percentile\": 0.99119}"},{"alert":1,"cve":"CVE-2023-21529","id":203,"kind":"kev","observed_at":1793665375,"payload":"{\"cveID\": \"CVE-2023-21529\", \"cwes\": [\"CWE-502\"], \"dateAdded\": \"2026-04-13\", \"dueDate\": \"2026-04-27\", \"forensicTriage\": \"No\", \"knownRansomwareCampaignUse\": \"Known\", \"notes\": \"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21529 ; https://nvd.nist.gov/vuln/detail/CVE-2023-21529\", \"product\": \"Exchange Server\", \"requiredAction\": \"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.\", \"shortDescription\": \"Microsoft Exchange Server contains a deserialization of untrusted data that allows an authenticated attacker to achieve remote code execution.\", \"vendorProject\": \"Microsoft\", \"vulnerabilityName\": \"Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability\"}"}],"record":{"affected":[{"platforms":["x64-based Systems"],"product":"Microsoft Exchange Server 2013 Cumulative Update 23","vendor":"Microsoft","versions":[{"lessThan":"15.00.1497.047","status":"affected","version":"15.00.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Microsoft Exchange Server 2016 Cumulative Update 23","vendor":"Microsoft","versions":[{"lessThan":"15.01.2507.021","status":"affected","version":"15.01.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Microsoft Exchange Server 2019 Cumulative Update 11","vendor":"Microsoft","versions":[{"lessThan":"15.02.0986.041","status":"affected","version":"15.02.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Microsoft Exchange Server 2019 Cumulative Update 12","vendor":"Microsoft","versions":[{"lessThan":"15.02.1118.025","status":"affected","version":"15.02.0","versionType":"custom"}]}],"cna":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-02T09:44:01.279Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"Microsoft Exchange Server Remote Code Execution Vulnerability","tags":["vendor-advisory","x_transferred"],"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21529"}],"title":"CVE Program Container"},{"metrics":[{"other":{"content":{"id":"CVE-2023-21529","options":[{"Exploitation":"active"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","timestamp":"2023-02-15T00:00:00+00:00","version":"2.0.3"},"type":"ssvc"}},{"other":{"content":{"dateAdded":"2026-04-13","reference":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-21529"},"type":"kev"}}],"providerMetadata":{"dateUpdated":"2026-04-14T03:55:24.065Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"references":[{"tags":["vendor-advisory"],"url":"https://www.microsoft.com/en-us/security/blog/2026/04/06/storm-1175-focuses-gaze-on-vulnerable-web-facing-assets-in-high-tempo-medusa-ransomware-operations/"},{"tags":["government-resource"],"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-21529"}],"timeline":[{"lang":"en","time":"2026-04-13T00:00:00.000Z","value":"CVE-2023-21529 added to CISA KEV"}],"title":"CISA ADP Vulnrichment"}],"cna":{"affected":[{"platforms":["x64-based Systems"],"product":"Microsoft Exchange Server 2013 Cumulative Update 23","vendor":"Microsoft","versions":[{"lessThan":"15.00.1497.047","status":"affected","version":"15.00.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Microsoft Exchange Server 2016 Cumulative Update 23","vendor":"Microsoft","versions":[{"lessThan":"15.01.2507.021","status":"affected","version":"15.01.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Microsoft Exchange Server 2019 Cumulative Update 11","vendor":"Microsoft","versions":[{"lessThan":"15.02.0986.041","status":"affected","version":"15.02.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Microsoft Exchange Server 2019 Cumulative Update 12","vendor":"Microsoft","versions":[{"lessThan":"15.02.1118.025","status":"affected","version":"15.02.0","versionType":"custom"}]}],"cpeApplicability":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:microsoft:exchange_server:*:cumulative_update_12:*:*:*:*:*:*","versionEndExcluding":"15.02.1118.025","versionStartIncluding":"15.02.0","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:exchange_server:*:cumulative_update_11:*:*:*:*:*:*","versionEndExcluding":"15.02.0986.041","versionStartIncluding":"15.02.0","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:exchange_server:*:cumulative_update_23:*:*:*:*:*:*","versionEndExcluding":"15.00.1497.047","versionStartIncluding":"15.00.0","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:exchange_server:*:cumulative_update_23:*:*:*:*:*:*","versionEndExcluding":"15.01.2507.021","versionStartIncluding":"15.01.0","vulnerable":true}],"negate":false,"operator":"OR"}]}],"datePublic":"2023-02-14T08:00:00.000Z","descriptions":[{"lang":"en-US","value":"Microsoft Exchange Server Remote Code Execution Vulnerability"}],"metrics":[{"cvssV3_1":{"baseScore":8.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-502","description":"CWE-502: Deserialization of Untrusted Data","lang":"en-US","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2026-08-19T16:26:33.854Z","orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft"},"references":[{"name":"Microsoft Exchange Server Remote Code Execution Vulnerability","tags":["vendor-advisory","patch"],"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21529"}],"title":"Microsoft Exchange Server Remote Code Execution Vulnerability"}},"cveMetadata":{"assignerOrgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","assignerShortName":"microsoft","cveId":"CVE-2023-21529","datePublished":"2023-02-14T19:33:00.590Z","dateReserved":"2022-12-01T14:00:11.197Z","dateUpdated":"2026-08-19T16:26:33.854Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"cna_checked":1794262800,"cve":"CVE-2023-21529","description":"Microsoft Exchange Server Remote Code Execution Vulnerability","epss":{"date":"2026-11-12","epss":0.59294,"percentile":0.99132},"epss_checked":1794522003,"first_seen":1793665375,"kev":{"cveID":"CVE-2023-21529","cwes":["CWE-502"],"dateAdded":"2026-04-13","dueDate":"2026-04-27","forensicTriage":"No","knownRansomwareCampaignUse":"Known","notes":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21529 ; https://nvd.nist.gov/vuln/detail/CVE-2023-21529","product":"Exchange Server","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","shortDescription":"Microsoft Exchange Server contains a deserialization of untrusted data that allows an authenticated attacker to achieve remote code execution.","vendorProject":"Microsoft","vulnerabilityName":"Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability"},"kev_checked":1794522003,"products":"Microsoft Microsoft Exchange Server 2013 Cumulative Update 23, Microsoft Microsoft Exchange Server 2016 Cumulative Update 23, Microsoft Microsoft Exchange Server 2019 Cumulative Update 11, Microsoft Microsoft Exchange Server 2019 Cumulative Update 12","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21529","https://www.microsoft.com/en-us/security/blog/2026/04/06/storm-1175-focuses-gaze-on-vulnerable-web-facing-assets-in-high-tempo-medusa-ransomware-operations/","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-21529"],"score":{"baseScore":8.8,"baseSeverity":"HIGH","provider":"microsoft","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","version":"3.1"},"solutions":"","state":"PUBLISHED","title":"Microsoft Exchange Server Remote Code Execution Vulnerability","updated_at":1794500401,"workarounds":""},"sources":[]}