CVE-2021-27065 CISA KEV · Actively exploitedLinked to ransomwareSuited to automated attack · CISA
Microsoft Exchange Server Remote Code Execution Vulnerability
CVSS score
7.8
EPSS probability
%99.9
Risk score
15.6
Published
5 y ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
GitHub
Quick One Line Powershell scripts to detect for webshells, possible zips, and logs. (★10)
Makefile Go / Python
Microsoft Exchange 2019 - Server-Side Request Forgery (Proxylogon) (PoC)
Makefile Go / Python
N
http://packetstormsecurity.com/files/161938/Microsoft-Exchange-ProxyLogon-Remote-Code-Execution.html http://packetstormsecurity.com/files/161938/Microsoft-Exchange-ProxyLogon-Remote-Code-Execution.html
Makefile Go / Python
NVD reference
http://packetstormsecurity.com/files/162736/Microsoft-Exchange-ProxyLogon-Collector.html
Makefile Go / Python
Similar Vulnerabilities
10.0
CVE-2020-0796 Actively exploitedMemory buffer overflow in Microsoft Windows 10 Version 1903 For 32 Bit Systems
Patch verified Public Exploits:4EPSS %100
9.8
CVE-2025-53770 Actively exploitedMicrosoft SharePoint Server Remote Code Execution Vulnerability
Patch verified Public Exploits:12EPSS %100
9.8
CVE-2025-59287 Actively exploitedWindows Server Update Service (WSUS) Remote Code Execution Vulnerability
Patch verified Public Exploits:10EPSS %100
9.8
CVE-2021-38647 Actively exploitedOpen Management Infrastructure (OMI) Remote Code Execution Vulnerability
Patch verified Public Exploits:10EPSS %100
9.8
CVE-2024-21413 Actively exploitedMicrosoft Outlook Remote Code Execution Vulnerability
Patch verified Public Exploits:7EPSS %95
9.1
CVE-2021-34473 Actively exploitedMicrosoft Exchange Server Remote Code Execution Vulnerability
Patch verified Public Exploits:9EPSS %100
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2021-27065"