{"id":2862,"date":"2022-01-19T12:06:35","date_gmt":"2022-01-19T12:06:35","guid":{"rendered":"https:\/\/www.sebae.net\/blog\/released-january-2022-exchange-server-security-updates\/"},"modified":"2022-01-19T12:09:02","modified_gmt":"2022-01-19T12:09:02","slug":"released-january-2022-exchange-server-security-updates","status":"publish","type":"post","link":"https:\/\/www.sebae.net\/blog\/released-january-2022-exchange-server-security-updates\/","title":{"rendered":"Released: January 2022 Exchange Server Security Updates"},"content":{"rendered":"<div>\n<p>Microsoft has released security updates for vulnerabilities found in any version of:<\/p>\n<ul>\n<li>Exchange Server 2013<\/li>\n<li>Exchange Server 2016<\/li>\n<li>Exchange Server 2019<\/li>\n<\/ul>\n<p>These updates are available for the following specific builds of Exchange Server:<\/p>\n<p style=\"background: #F0F0F0; padding: .5em; margin: 1em 0 1em 0;\"><strong>IMPORTANT:<\/strong>&nbsp;If manually installing security updates, you&nbsp;<font color=\"#FF0000\"><em>must<\/em><\/font>&nbsp;install .msp from elevated command prompt (see Known Issues in update KB article).<\/p>\n<ul>\n<li>Exchange Server 2013 <a href=\"https:\/\/www.microsoft.com\/en-us\/download\/details.aspx?familyID=9bcec622-bd02-4557-ad77-4c560abb3da3\" target=\"_self\" rel=\"noopener noreferrer\">CU23<\/a><\/li>\n<li>Exchange Server 2016 <a href=\"https:\/\/www.microsoft.com\/en-us\/download\/details.aspx?familyID=be6d511a-2523-4817-b5cd-11d1316ac398\" target=\"_self\" rel=\"noopener noreferrer\">CU21<\/a> and <a href=\"https:\/\/www.microsoft.com\/en-us\/download\/details.aspx?familyID=ec50d425-44a9-4f15-bda0-bc1d62f36310\" target=\"_self\" rel=\"noopener noreferrer\">CU22<\/a><\/li>\n<li>Exchange Server 2019 <a href=\"https:\/\/www.microsoft.com\/en-us\/download\/details.aspx?familyID=c03bef2b-342f-40ef-a35b-e3f56bc909ad\" target=\"_self\" rel=\"noopener noreferrer\">CU10<\/a> and <a href=\"https:\/\/www.microsoft.com\/en-us\/download\/details.aspx?familyID=02f280f1-e574-4ef6-a265-8d33f6e5823b\" target=\"_self\" rel=\"noopener noreferrer\">CU11<\/a><\/li>\n<\/ul>\n<p>The January 2022 security updates for Exchange Server address vulnerabilities responsibly reported by security partners and found through Microsoft\u2019s internal processes. Although we are not aware of any active exploits in the wild, our recommendation is to install these updates <em>immediately<\/em> to protect your environment.<\/p>\n<p>These vulnerabilities affect on-premises Microsoft Exchange Server, including servers used by customers in Exchange Hybrid mode. Exchange Online customers are already protected and do not need to take any action.<\/p>\n<p>More details about specific CVEs can be found in <a href=\"https:\/\/msrc.microsoft.com\/update-guide\/\" target=\"_blank\" rel=\"noopener noreferrer\">Security Update Guide<\/a> (filter on Exchange Server under Product Family).<\/p>\n<h1 id=\"toc-hId-2131486845\"><span id=\"update-installation\">Update installation<\/span><\/h1>\n<p>Two update paths are available:<\/p>\n<p><span class=\"lia-inline-image-display-wrapper lia-image-align-center\" image-alt=\"Jan22SUpath.png\" style=\"width: 999px;\"><img decoding=\"async\" src=\"https:\/\/techcommunity.microsoft.com\/t5\/image\/serverpage\/image-id\/337025i09B20A571B35A16F\/image-size\/large?v=v2&amp;px=999\" role=\"button\" title=\"Jan22SUpath.png\" alt=\"Jan22SUpath.png\"><\/span><\/p>\n<h2 id=\"toc-hId--1472918977\"><span id=\"inventory-your-exchange-servers-determine-which-updates-are-needed\">Inventory your Exchange Servers \/ determine which updates are needed<\/span><\/h2>\n<p>Use the <a href=\"https:\/\/aka.ms\/ExchangeHealthChecker\" target=\"_blank\" rel=\"noopener noreferrer\">Exchange Server Health Checker script<\/a> (use the latest release) to inventory your servers. Running this script will tell you if any of your Exchange Servers are behind on updates (CUs and SUs).<\/p>\n<h2 id=\"toc-hId-1014593856\"><span id=\"update-to-the-latest-cumulative-update\">Update to the latest Cumulative Update<\/span><\/h2>\n<p>Go to <a href=\"https:\/\/aka.ms\/ExchangeUpdateWizard\" target=\"_blank\" rel=\"noopener noreferrer\">https:\/\/aka.ms\/ExchangeUpdateWizard<\/a> and choose your currently running CU and your target CU to get directions for your environment.<\/p>\n<h2 id=\"toc-hId--792860607\"><span id=\"if-you-encounter-errors-during-or-after-installation-of-exchange-server-updates\">If you encounter errors during or after installation of Exchange Server updates<\/span><\/h2>\n<p>If you encounter errors during installation, see the <a href=\"https:\/\/aka.ms\/ExSetupAssist\" target=\"_blank\" rel=\"noopener noreferrer\">SetupAssist script<\/a>. If something does not work properly after updates, see <a href=\"https:\/\/docs.microsoft.com\/en-us\/exchange\/troubleshoot\/client-connectivity\/exchange-security-update-issues\" target=\"_blank\" rel=\"noopener noreferrer\">Repair failed installations of Exchange Cumulative and Security updates<\/a>.<\/p>\n<h2 id=\"toc-hId-1694652226\"><span id=\"known-issues-with-this-release\">Known issues with this release<\/span><\/h2>\n<p>We are not aware of any known issues with this release. This release addresses an earlier known issue with <a href=\"https:\/\/techcommunity.microsoft.com\/t5\/exchange-team-blog\/released-november-2021-exchange-server-security-updates\/ba-p\/2933169#:~:text=article%20for%20workarounds%3A-,OWA%20redirection%20doesn%27t%20work%20after%20installing%20November%202021%20security%20updates%20for%20Exchange%20Server%20201...,-.%20We%20are%20working\" target=\"_blank\" rel=\"noopener\">Outlook Web App hybrid redirect after installation of November 2021 security updates<\/a>.<\/p>\n<h1 id=\"toc-hId-1684149122\"><span id=\"faqs\">FAQs<\/span><\/h1>\n<p><strong><em>My organization is in Hybrid mode with Exchange Online. Do I need to do anything?<\/em><\/strong><br \/>\nWhile Exchange Online customers are already protected, the January 2022 security updates do need to be applied to your on-premises Exchange Servers, even if they are used only for management purposes. You do <em>not<\/em> need to re-run the Hybrid Configuration Wizard (HCW) after applying updates.<\/p>\n<p><strong><em>Do I need to install the updates on \u2018Exchange Management Tools only\u2019 workstations?<br \/>\n<\/em><\/strong>Servers or workstations running only Microsoft Exchange Management Tools (no Exchange services) do not need to apply these updates.<\/p>\n<p><em><strong>Does the January 2022 security update package contain any fixes related to recent <a href=\"https:\/\/techcommunity.microsoft.com\/t5\/exchange-team-blog\/email-stuck-in-exchange-on-premises-transport-queues\/bc-p\/3050765\" target=\"_self\" rel=\"noopener\">Exchange transport queue buildup issue<\/a>?<\/strong><\/em><br \/>\nJanuary 2022 security update package does not contain any changes related to January 2022 transport queue buildup issue. Please <a href=\"https:\/\/techcommunity.microsoft.com\/t5\/exchange-team-blog\/email-stuck-in-exchange-on-premises-transport-queues\/bc-p\/3050765\" target=\"_self\" rel=\"noopener\">follow that blog post<\/a> for steps to resolve transport queue buildup.<\/p>\n<p style=\"background: #F0F0F0; padding: .5em; margin: 1em 0 1em 0;\"><strong>NOTE:<\/strong> This post might receive future updates; they will be listed here (if available).<\/p>\n<p><span class=\"author\">The Exchange Team<\/span><\/p>\n<\/div>\n<p><a href=\"https:\/\/techcommunity.microsoft.com\/t5\/exchange-team-blog\/released-january-2022-exchange-server-security-updates\/ba-p\/3050699\">Read full article (Microsoft Exchange Blog)<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"Microsoft has released security updates for vulnerabilities found in any version of: Exchange Server 2013 Exchange Server 2016&hellip;\n","protected":false},"author":2,"featured_media":2564,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"csco_singular_sidebar":"","csco_page_header_type":"","csco_appearance_grid":"","csco_page_load_nextpost":"","csco_post_video_location":[],"csco_post_video_location_hash":"","csco_post_video_url":"","csco_post_video_bg_start_time":0,"csco_post_video_bg_end_time":0,"footnotes":""},"categories":[15],"tags":[66,67,68],"coauthors":[48],"class_list":["post-2862","post","type-post","status-publish","format-standard","has-post-thumbnail","category-microsoft-exchange-server","tag-microsoft","tag-released","tag-security","cs-entry","cs-video-wrap"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.5 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Released: January 2022 Exchange Server Security Updates | Sebae Networks<\/title>\n<meta name=\"description\" content=\"View Released: January 2022 Exchange Server Security Updates for free, here at Sebae. Discover more great posts on our website.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.sebae.net\/blog\/released-january-2022-exchange-server-security-updates\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Released: January 2022 Exchange Server Security Updates | Sebae Networks\" \/>\n<meta property=\"og:description\" content=\"View Released: January 2022 Exchange Server Security Updates for free, here at Sebae. Discover more great posts on our website.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.sebae.net\/blog\/released-january-2022-exchange-server-security-updates\/\" \/>\n<meta property=\"og:site_name\" content=\"Sebae Networks\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/sebaenetworks\" \/>\n<meta property=\"article:published_time\" content=\"2022-01-19T12:06:35+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2022-01-19T12:09:02+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.sebae.net\/blog\/wp-content\/uploads\/2021\/11\/exchange-server-header.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1920\" \/>\n\t<meta property=\"og:image:height\" content=\"1080\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"James Dean\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@sebaenetworks\" \/>\n<meta name=\"twitter:site\" content=\"@sebaenetworks\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"James Dean\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Released: January 2022 Exchange Server Security Updates | Sebae Networks","description":"View Released: January 2022 Exchange Server Security Updates for free, here at Sebae. Discover more great posts on our website.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.sebae.net\/blog\/released-january-2022-exchange-server-security-updates\/","og_locale":"en_GB","og_type":"article","og_title":"Released: January 2022 Exchange Server Security Updates | Sebae Networks","og_description":"View Released: January 2022 Exchange Server Security Updates for free, here at Sebae. Discover more great posts on our website.","og_url":"https:\/\/www.sebae.net\/blog\/released-january-2022-exchange-server-security-updates\/","og_site_name":"Sebae Networks","article_publisher":"https:\/\/www.facebook.com\/sebaenetworks","article_published_time":"2022-01-19T12:06:35+00:00","article_modified_time":"2022-01-19T12:09:02+00:00","og_image":[{"width":1920,"height":1080,"url":"https:\/\/www.sebae.net\/blog\/wp-content\/uploads\/2021\/11\/exchange-server-header.png","type":"image\/png"}],"author":"James Dean","twitter_card":"summary_large_image","twitter_creator":"@sebaenetworks","twitter_site":"@sebaenetworks","twitter_misc":{"Written by":"James Dean","Estimated reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.sebae.net\/blog\/released-january-2022-exchange-server-security-updates\/#article","isPartOf":{"@id":"https:\/\/www.sebae.net\/blog\/released-january-2022-exchange-server-security-updates\/"},"author":{"name":"James Dean","@id":"https:\/\/www.sebae.net\/blog\/#\/schema\/person\/6d07e05e3d3e4483117c4e2c3315a89f"},"headline":"Released: January 2022 Exchange Server Security Updates","datePublished":"2022-01-19T12:06:35+00:00","dateModified":"2022-01-19T12:09:02+00:00","mainEntityOfPage":{"@id":"https:\/\/www.sebae.net\/blog\/released-january-2022-exchange-server-security-updates\/"},"wordCount":480,"commentCount":0,"publisher":{"@id":"https:\/\/www.sebae.net\/blog\/#organization"},"image":{"@id":"https:\/\/www.sebae.net\/blog\/released-january-2022-exchange-server-security-updates\/#primaryimage"},"thumbnailUrl":"https:\/\/www.sebae.net\/blog\/wp-content\/uploads\/2021\/11\/exchange-server-header.png","keywords":["Microsoft","released","security"],"articleSection":["Microsoft Exchange Server"],"inLanguage":"en-GB","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.sebae.net\/blog\/released-january-2022-exchange-server-security-updates\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.sebae.net\/blog\/released-january-2022-exchange-server-security-updates\/","url":"https:\/\/www.sebae.net\/blog\/released-january-2022-exchange-server-security-updates\/","name":"Released: January 2022 Exchange Server Security Updates | Sebae Networks","isPartOf":{"@id":"https:\/\/www.sebae.net\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.sebae.net\/blog\/released-january-2022-exchange-server-security-updates\/#primaryimage"},"image":{"@id":"https:\/\/www.sebae.net\/blog\/released-january-2022-exchange-server-security-updates\/#primaryimage"},"thumbnailUrl":"https:\/\/www.sebae.net\/blog\/wp-content\/uploads\/2021\/11\/exchange-server-header.png","datePublished":"2022-01-19T12:06:35+00:00","dateModified":"2022-01-19T12:09:02+00:00","description":"View Released: January 2022 Exchange Server Security Updates for free, here at Sebae. Discover more great posts on our website.","breadcrumb":{"@id":"https:\/\/www.sebae.net\/blog\/released-january-2022-exchange-server-security-updates\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.sebae.net\/blog\/released-january-2022-exchange-server-security-updates\/"]}]},{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/www.sebae.net\/blog\/released-january-2022-exchange-server-security-updates\/#primaryimage","url":"https:\/\/www.sebae.net\/blog\/wp-content\/uploads\/2021\/11\/exchange-server-header.png","contentUrl":"https:\/\/www.sebae.net\/blog\/wp-content\/uploads\/2021\/11\/exchange-server-header.png","width":1920,"height":1080,"caption":"exchange server header"},{"@type":"BreadcrumbList","@id":"https:\/\/www.sebae.net\/blog\/released-january-2022-exchange-server-security-updates\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.sebae.net\/blog\/"},{"@type":"ListItem","position":2,"name":"Released: January 2022 Exchange Server Security Updates"}]},{"@type":"WebSite","@id":"https:\/\/www.sebae.net\/blog\/#website","url":"https:\/\/www.sebae.net\/blog\/","name":"Sebae Networks","description":"Tech Tips, News, Tutorials &amp; Advice","publisher":{"@id":"https:\/\/www.sebae.net\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.sebae.net\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Organization","@id":"https:\/\/www.sebae.net\/blog\/#organization","name":"Sebae","url":"https:\/\/www.sebae.net\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/www.sebae.net\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.sebae.net\/blog\/wp-content\/uploads\/2023\/06\/sebae-logo-icon.png","contentUrl":"https:\/\/www.sebae.net\/blog\/wp-content\/uploads\/2023\/06\/sebae-logo-icon.png","width":512,"height":512,"caption":"Sebae"},"image":{"@id":"https:\/\/www.sebae.net\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/sebaenetworks","https:\/\/x.com\/sebaenetworks"]},{"@type":"Person","@id":"https:\/\/www.sebae.net\/blog\/#\/schema\/person\/6d07e05e3d3e4483117c4e2c3315a89f","name":"James Dean","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/www.sebae.net\/blog\/wp-content\/uploads\/2021\/10\/avatar_user_2_1634496168-96x96.jpg72371c27260698ee55141397050ef40a","url":"https:\/\/www.sebae.net\/blog\/wp-content\/uploads\/2021\/10\/avatar_user_2_1634496168-96x96.jpg","contentUrl":"https:\/\/www.sebae.net\/blog\/wp-content\/uploads\/2021\/10\/avatar_user_2_1634496168-96x96.jpg","caption":"James Dean"},"sameAs":["https:\/\/www.sebae.net"],"url":"https:\/\/www.sebae.net\/blog\/author\/jdean\/"}]}},"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/www.sebae.net\/blog\/wp-json\/wp\/v2\/posts\/2862","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.sebae.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.sebae.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.sebae.net\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.sebae.net\/blog\/wp-json\/wp\/v2\/comments?post=2862"}],"version-history":[{"count":1,"href":"https:\/\/www.sebae.net\/blog\/wp-json\/wp\/v2\/posts\/2862\/revisions"}],"predecessor-version":[{"id":2863,"href":"https:\/\/www.sebae.net\/blog\/wp-json\/wp\/v2\/posts\/2862\/revisions\/2863"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.sebae.net\/blog\/wp-json\/wp\/v2\/media\/2564"}],"wp:attachment":[{"href":"https:\/\/www.sebae.net\/blog\/wp-json\/wp\/v2\/media?parent=2862"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.sebae.net\/blog\/wp-json\/wp\/v2\/categories?post=2862"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.sebae.net\/blog\/wp-json\/wp\/v2\/tags?post=2862"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/www.sebae.net\/blog\/wp-json\/wp\/v2\/coauthors?post=2862"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}