{"vulnerability": "CVE-2021-28482", "sightings": [{"uuid": "41d52648-d7bc-459c-bd27-64c1c36ebc78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2021-28482", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus_11/21", "content": "", "creation_timestamp": "2026-03-17T14:56:05.288607Z"}, {"uuid": "fefe9803-89a6-420d-9190-8c07152f9e05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2021-28482", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus_11/21", "content": "", "creation_timestamp": "2021-04-15T06:06:29.000000Z"}, {"uuid": "8cb97789-3279-4822-96fc-994967ff5ca3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-28482", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/fdda4963-0aa7-4d15-8a8f-969db8f304ca", "content": "", "creation_timestamp": "2025-02-28T23:49:13.272798Z"}, {"uuid": "8dc20d7e-98ea-4ee7-86b1-d458ff4e35c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-28482", "type": "published-proof-of-concept", "source": "https://t.me/cKure/5354", "content": "\u25a0\u25a0\u25a0\u25a0\u25a1 CVE-2021-28482: Exchange PoC\n\nhttps://github.com/Shadow0ps/CVE-2021-28482-Exchange-POC", "creation_timestamp": "2021-05-16T06:34:06.000000Z"}, {"uuid": "01525e97-6160-4923-b951-c5990a673a5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-28482", "type": "exploited", "source": "https://t.me/cKure/4840", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 Microsoft today\u00a0issued fixes for 114 vulnerabilities as part of its monthly security update release, which this month addressed 19 critical flaws, four critical Microsoft Exchange Server bugs found by the National Security Agency (NSA), and one zero-day bug in Desktop Window Manager.\n\u00a0\nCVE-2021-28310, a Win32k elevation of privilege vulnerability, is the only CVE under active attack patched this month.\n\nYesterday's patches also addressed four critical remote code execution vulnerabilities in Microsoft Exchange Server:\u00a0CVE-2021-28480,\u00a0CVE-2021-28481,\u00a0CVE-2021-28482, and\u00a0CVE-2021-28483. All of these were discovered by the NSA and affect Exchange Server versions 2013 through 2019.\nCVE-2021-28480 and CVE-2021-28481 have a CVSS score of 9.8 and require no authorization or user interaction to exploit.", "creation_timestamp": "2021-04-14T04:19:35.000000Z"}, {"uuid": "ed6c580b-8cbb-44bf-b5ee-51aa0011c52e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-28482", "type": "seen", "source": "Telegram/QHCepyPm1WQaqfBNNWxTv-7jnQZ340ReXjHBRJFddrcYXOyl", "content": "", "creation_timestamp": "2021-05-25T01:41:58.000000Z"}, {"uuid": "6e0f6a59-ff62-4a72-a775-827583e06648", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-28482", "type": "seen", "source": "Telegram/ziOu5Nvr2eB-voLXOlKOWIDqDERt0p9ExXuoFj0nmEN3JtiR", "content": "", "creation_timestamp": "2021-05-24T01:44:08.000000Z"}, {"uuid": "e595db5e-d157-41f9-8f69-e0275bde5cbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-28482", "type": "seen", "source": "Telegram/kY2fNljGOGDepf8HmWYBRM6aPIpDZMxAdiPSEQJGkdOslRcC", "content": "", "creation_timestamp": "2021-05-22T13:20:40.000000Z"}, {"uuid": "97e9d253-8395-45cc-886a-801f72195dbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-28482", "type": "seen", "source": "Telegram/fKYCYTpidtTLIalbI8SvuUxKCSSNn--CKZjLb7jTZvHE2VCS", "content": "", "creation_timestamp": "2021-05-22T02:52:22.000000Z"}, {"uuid": "43083f76-ab0b-4812-9a24-370de9c42914", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-28482", "type": "seen", "source": "Telegram/c9Dma8iydLkBdImjfvuHvFxOwdnZNkvZiWtyeYJYgPUomhiw", "content": "", "creation_timestamp": "2021-05-30T01:39:32.000000Z"}, {"uuid": "62008312-559e-461e-b3d5-b3db45e8ca83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-28482", "type": "seen", "source": "https://t.me/alexmakus/4025", "content": "\u0421\u0432\u0435\u0436\u0438\u0435 \u043f\u0430\u0442\u0447\u0438 \u043f\u043e\u0434\u044a\u0435\u0445\u0430\u043b\u0438 \u0434\u043b\u044f Exchange \n\nhttps://techcommunity.microsoft.com/t5/exchange-team-blog/released-april-2021-exchange-server-security-updates/ba-p/2254617\n\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-28480\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-28481\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-28482\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-28483\n\n\u0434\u0430\u0436\u0435 \u043d\u0435\u043c\u043d\u043e\u0433\u043e \u0436\u0430\u043b\u043a\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 Exchange, \u044d\u0442\u043e\u0442 \u0433\u043e\u0434 \u0443 \u043d\u0438\u0445 \u043d\u0435 \u0437\u0430\u0434\u0430\u043b\u0441\u044f.", "creation_timestamp": "2021-04-13T19:02:10.000000Z"}, {"uuid": "53cc9f21-3336-4bf7-94f8-d167ca7bbdab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-28482", "type": "seen", "source": "https://t.me/CyberSecurityIL/3224", "content": "\u05d4-NSA \u05de\u05d3\u05d5\u05d5\u05d7\u05d9\u05dd \u05db\u05d9 \u05de\u05e6\u05d0\u05d5 \u05de\u05e1\u05e4\u05e8 \u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \u05e7\u05e8\u05d9\u05d8\u05d9\u05d5\u05ea \u05d1\u05e9\u05e8\u05ea\u05d9 Exchange, \u05de\u05d9\u05d9\u05e7\u05e8\u05d5\u05e1\u05d5\u05e4\u05d8 \u05d4\u05d5\u05e6\u05d9\u05d0\u05d4 \u05e2\u05d3\u05db\u05d5\u05df \u05d3\u05d7\u05d5\u05e3 \u05dc\u05de\u05e9\u05ea\u05de\u05e9\u05d9\u05dd.\n\n\u05dc\u05e4\u05d9 \u05d4\u05e4\u05e8\u05e1\u05d5\u05dd \u05d4-NSA \u05d3\u05d9\u05d5\u05d5\u05d7\u05d5 \u05dc\u05de\u05d9\u05d9\u05e7\u05e8\u05d5\u05e1\u05d5\u05e4\u05d8 \u05e2\u05dc 4 \u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \u05e9\u05de\u05e6\u05d0\u05d5 \u05d4\u05de\u05d0\u05e4\u05e9\u05e8\u05d5\u05ea \u05d4\u05e8\u05e6\u05ea \u05e7\u05d5\u05d3 \u05de\u05e8\u05d7\u05d5\u05e7 \u05e2\u05dc \u05e9\u05e8\u05ea\u05d9 Exchange 2013-2019.\n\n\u05d4\u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \u05e9\u05d4\u05ea\u05d2\u05dc\u05d5 \u05e7\u05d9\u05d1\u05dc\u05d5 \u05d0\u05ea \u05de\u05e1\u05e4\u05e8\u05d9 \u05d4\u05de\u05e2\u05e7\u05d1 \u05d4\u05d1\u05d0\u05d9\u05dd:\n\nCVE-2021-28480\nCVE-2021-28481\nCVE-2021-28482\nCVE-2021-28483\n\n\u05db\u05d0\u05de\u05d5\u05e8, \u05e2\u05d3\u05db\u05d5\u05df \u05d3\u05d7\u05d5\u05e3 \u05d9\u05e6\u05d0 \u05d4\u05d9\u05d5\u05dd \u05de\u05d7\u05d1\u05e8\u05ea \u05de\u05d9\u05d9\u05e7\u05e8\u05d5\u05e1\u05d5\u05e4\u05d8 \u05d4\u05e1\u05d5\u05d2\u05e8 \u05d0\u05ea \u05d4\u05d7\u05d5\u05dc\u05e9\u05d5\u05ea.\n\nhttps://t.me/CyberSecurityIL/915", "creation_timestamp": "2021-04-14T00:12:17.000000Z"}, {"uuid": "338c63ef-f3a4-4c39-a2d9-e6624866c259", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-28482", "type": "exploited", "source": "https://t.me/CyberSecurityTechnologies/3286", "content": "#exploit\nCVE-2021-28482:\nMS Exchange Server RCE Vulnerability (PoC)\nhttps://gist.github.com/testanull/9ebbd6830f7a501e35e67f2fcaa57bda\n]-> https://github.com/Shadow0ps/CVE-2021-28482-Exchange-POC/blob/main/Proof-Of-Concept.py", "creation_timestamp": "2024-10-04T15:10:04.000000Z"}, {"uuid": "7ccf4b7d-163f-4707-a765-0bcd515814b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-28482", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/3159", "content": "#Analytics\n10 most exploited vulnerabilities of the week (April 12-18)\nCVE-2020-13379 - Unauth Full-Read SSRF in Grafana\nhttps://t.me/cybersecuritytechnologies/1515\nCVE-2021-24086 - Win IPv4/6 Stack RCE/DoS Vulns\nhttps://unit42.paloaltonetworks.com/cve-2021-24074-patch-tuesday\nCVE-2021-1647 - MS Defender RCE Vulnerability\nhttps://www.anquanke.com/post/id/231625\nCVE-2021-28310 - Win32k Elevation of Privilege Vulnerability\nhttps://t.me/cybersecuritytechnologies/3124\nCVE-2021-24027 - Remote exploitation of a man-in-the-disk vulnerability in WhatsApp\nhttps://t.me/cybersecuritytechnologies/3126\nCVE-2021-28480/28481/28482/28483 - MS Exchange Server RCE Vulnerability\nhttps://www.tenable.com/blog/cve-2021-28480-cve-2021-28481-cve-2021-28482-cve-2021-28483-four-critical-microsoft-exchange\nCVE-2021-28316 - Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability\nhttps://t.me/cybersecuritytechnologies/3156", "creation_timestamp": "2021-04-19T11:01:18.000000Z"}, {"uuid": "fdf9fd07-486f-4c22-892d-b9f9e49eeaf4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-28482", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/3279", "content": "#Analytics\nTop 10 Most Used Vulnerabilities of the Month (April 1-30)\n\nCVE-2020-13379 - Unauth Full-Read SSRF in Grafana\nhttps://t.me/cybersecuritytechnologies/1515\nCVE-2021-24086 - Win IPv4/6 Stack RCE/DoS Vulns\nhttps://unit42.paloaltonetworks.com/cve-2021-24074-patch-tuesday\nCVE-2021-22893 Pulse SecureVPN RCE\nhttps://t.me/cybersecuritytechnologies/3185\nCVE-2021-28310 - Win32k EoP Vulnerability\nhttps://t.me/cybersecuritytechnologies/3124\nCVE-2021-26411 - IE mshtml UAF\nhttps://t.me/cybersecuritytechnologies/2908\nCVE-2021-22204 - DjVu improper neutralization of user data\nhttps://github.com/exiftool/exiftool/commit/cf0f4e7dcd024ca99615bfd1102a841a25dde031#diff-fa0d652d10dbcd246e6b1df16c1e992931d3bb717a7e36157596b76bdadb3800\nCVE-2021-24027 - Remote exploitation of a man-in-the-disk vulnerability in WhatsApp\nhttps://t.me/cybersecuritytechnologies/3126\nCVE-2021-28316 - Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability\nhttps://t.me/cybersecuritytechnologies/3156\nCVE-2021-28480/28482 - MS Exchange Server RCE\nhttps://www.tenable.com/blog/cve-2021-28480-cve-2021-28481-cve-2021-28482-cve-2021-28483-four-critical-microsoft-exchange", "creation_timestamp": "2024-04-30T17:11:44.000000Z"}, {"uuid": "b280042b-c84e-4c54-a839-2f86a09a970c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-28482", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/3506", "content": "#Analytics\nTop 10 Most Used Vulns of the Month (may 1-31)\nCVE-2021-31166 - HTTP Stack RCE\nhttps://t.me/cybersecuritytechnologies/3388\nCVE-2021-21551 -Dell BIOS Driver PE\nhttps://t.me/cybersecuritytechnologies/3293\nCVE-2021-30747 -Covert channel in Apple M1\nhttps://t.me/cybersecuritytechnologies/3472\nCVE-2021-22204 -DjVu vuln\nhttps://github.com/exiftool/exiftool/commit/cf0f4e7dcd024ca99615bfd1102a841a25dde031#diff-fa0d652d10dbcd246e6b1df16c1e992931d3bb717a7e36157596b76bdadb3800\nCVE-2021-28482 -MS Exchange RCE\nhttps://t.me/cybersecuritytechnologies/3286\nCVE-2021-21974 -VMware\u00a0ESXi heap-overflow\nhttps://t.me/cybersecuritytechnologies/3460\nCVE-2021-29447 -WordPress XXE\nhttps://t.me/cybersecuritytechnologies/3142\nCVE-2021-21985 - vSphere Client RCE\nhttps://t.me/cybersecuritytechnologies/3493\nCVE-2021-32471 -ACE in TuringMachine\nhttps://t.me/cybersecuritytechnologies/3364\nCVE-2021-3490 -Linux Kernel eBPF\nhttps://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf.git/commit/?id=049c4e13714ecbca567b4d5f6d563f05d431c80e", "creation_timestamp": "2024-09-28T16:48:46.000000Z"}, {"uuid": "0b22bffa-c5f8-428c-abd7-aa0a21363fcf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2021-28482", "type": "seen", "source": "https://t.me/sysadm_in_up/622", "content": "", "creation_timestamp": "2026-07-29T12:03:22.302419Z"}, {"uuid": "341d4f29-d0e1-4c1b-b0f4-dae0f610c6e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2021-28482", "type": "seen", "source": "https://t.me/reverseame/1125", "content": "", "creation_timestamp": "2026-07-29T12:02:58.293868Z"}, {"uuid": "80798c76-e40f-48db-a820-503041fd16d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2021-28482", "type": "seen", "source": "https://t.me/sysadm_in_up/622", "content": "", "creation_timestamp": "2026-07-30T00:03:07.880832Z"}, {"uuid": "906c3aa5-5adf-4f5b-af14-822a8db34bbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2021-28482", "type": "seen", "source": "https://t.me/reverseame/1125", "content": "", "creation_timestamp": "2026-07-30T00:02:47.934943Z"}, {"uuid": "f87510a8-620c-4cd1-b267-08cd2c80e390", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2021-28482", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/1125", "content": "", "creation_timestamp": "2026-08-03T11:08:45.144916Z"}, {"uuid": "8f1abe21-3803-4193-89ee-72bf3a4419d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2021-28482", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/1125", "content": "", "creation_timestamp": "2026-08-04T00:00:41.856534Z"}, {"uuid": "61fe97db-7991-4936-9e76-9a76b58e5deb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2021-28482", "type": "exploited", "source": "https://t.me/sysadm_in_up/622", "content": "", "creation_timestamp": "2026-08-04T05:00:04.636604Z"}, {"uuid": "a34a3cc0-8e8b-4b62-9a14-5e7b378f7170", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2021-28482", "type": "exploited", "source": "https://t.me/sysadm_in_up/622", "content": "", "creation_timestamp": "2026-08-05T00:00:55.361839Z"}, {"uuid": "fb680c3c-7459-4c7c-88ae-ef512ecef40d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2021-28482", "type": "published-proof-of-concept", "source": "https://t.me/cissp/2993", "content": "", "creation_timestamp": "2026-09-11T09:00:04.842708Z"}, {"uuid": "ba337f97-890a-4c78-9213-d51efbbf33b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2021-28482", "type": "published-proof-of-concept", "source": "https://t.me/vulns/382", "content": "", "creation_timestamp": "2026-09-08T19:00:06.060799Z"}, {"uuid": "088b7515-d6c7-4bb1-aa37-ef4bb4664ba5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2021-28482", "type": "seen", "source": "https://t.me/vulns/382", "content": "", "creation_timestamp": "2026-09-01T20:02:51.021156Z"}, {"uuid": "d5616cfe-5a91-4860-b29a-ca27a22c8ae4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2021-28482", "type": "seen", "source": "https://t.me/hacking_Attack/4998", "content": "", "creation_timestamp": "2026-09-01T20:02:46.713370Z"}, {"uuid": "1d728f83-0dab-458e-849e-406d45b6d44f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2021-28482", "type": "seen", "source": "https://t.me/cissp/2993", "content": "", "creation_timestamp": "2026-09-01T17:00:53.469493Z"}, {"uuid": "376a04a9-f7dd-496c-b42b-27bcdb807e7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2021-28482", "type": "seen", "source": "https://t.me/cissp/3093", "content": "", "creation_timestamp": "2026-09-01T17:00:51.487413Z"}]}