What is CVE-2021-1730?

CVE-2021-1730 is a security advisory published by Microsoft Security Response Center (MSRC) with High severity. Microsoft Exchange Server Spoofing Vulnerability

Which CVE IDs does CVE-2021-1730 cover?

CVE-2021-1730 covers the following CVE IDs: CVE-2021-1730. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of CVE-2021-1730?

CVE-2021-1730 has a CVSS v3 base score of 5.4, published by Microsoft Security Response Center (MSRC).

Which products are affected by CVE-2021-1730?

CVE-2021-1730 affects 2 products, including: Microsoft Exchange Server 2016 Cumulative Update 18; Microsoft Exchange Server 2019 Cumulative Update 7.

CVE-2021-1730HighCVSS 5.4

Microsoft Exchange Server Spoofing Vulnerability

Vendor

Microsoft Security Response Center (MSRC)

Published

February 9, 2021

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2021-1730 →

📋 Description

A spoofing vulnerability exists in Microsoft Exchange Server which could result in an attack that would allow a malicious actor to impersonate the user. This update addresses this vulnerability. To prevent these types of attacks, Microsoft recommends customers to download inline images from different DNSdomains than the rest of OWA. Please see further instructions in the FAQ to put in place this mitigations.

🎯 Affected products2

Microsoft Exchange Server 2016 Cumulative Update 18
Microsoft Exchange Server 2019 Cumulative Update 7

✅ Remediation

KB4571787 (Security Update) KB4571788 (Security Update)

🔗 References (4)

advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1730
patchhttps://support.microsoft.com/help/4571787
patchhttp://www.microsoft.com/download/details.aspx?FamilyID=42086856-b6eb-4c6c-96cd-1c9d33a07d04
referencehttps://support.microsoft.com/help/4571788