{"id":3399,"date":"2022-08-10T03:00:07","date_gmt":"2022-08-10T02:00:07","guid":{"rendered":"https:\/\/www.sebae.net\/blog\/released-august-2022-exchange-server-security-updates\/"},"modified":"2022-08-10T03:00:07","modified_gmt":"2022-08-10T02:00:07","slug":"released-august-2022-exchange-server-security-updates","status":"publish","type":"post","link":"https:\/\/www.sebae.net\/blog\/released-august-2022-exchange-server-security-updates\/","title":{"rendered":"Released: August 2022 Exchange Server Security Updates"},"content":{"rendered":"<div>\n<p>Microsoft has released security updates (SUs) for vulnerabilities found in:<\/p>\n<ul>\n<li>Exchange Server 2013<\/li>\n<li>Exchange Server 2016<\/li>\n<li>Exchange Server 2019<\/li>\n<\/ul>\n<p style=\"background: #F0F0F0; padding: .5em; margin: 1em 0 1em 0;\"><strong><font color=\"#DF0000\">IMPORTANT<\/font>:<\/strong>\u00a0Updates are released in a self-extracting auto-elevating .exe package. Please see <a href=\"https:\/\/techcommunity.microsoft.com\/t5\/exchange-team-blog\/new-exchange-server-security-update-and-hotfix-packaging\/ba-p\/3301819\" target=\"_blank\" rel=\"noopener\">this post<\/a> for more information. Older version of update packages can be downloaded from <a href=\"https:\/\/www.catalog.update.microsoft.com\/Home.aspx\" target=\"_blank\" rel=\"noopener noreferrer\">Microsoft Update Catalog<\/a>.<\/p>\n<p>These SUs are available for the following specific builds of Exchange Server:<\/p>\n<ul>\n<li>Exchange Server 2013 <a href=\"https:\/\/www.microsoft.com\/en-us\/download\/details.aspx?familyID=479a8745-ec96-4634-9935-80aa6131737b\" target=\"_blank\" rel=\"noopener noreferrer\">CU23<\/a><\/li>\n<li>Exchange Server 2016 <a href=\"https:\/\/www.microsoft.com\/en-us\/download\/details.aspx?familyID=4d630555-9c16-46fe-b72b-aec651b71efb\" target=\"_blank\" rel=\"noopener noreferrer\">CU22<\/a> and <a href=\"https:\/\/www.microsoft.com\/en-us\/download\/details.aspx?familyID=2961d7a6-c089-4fe6-8c4c-c100878950b8\" target=\"_blank\" rel=\"noopener noreferrer\">CU23<\/a><\/li>\n<li>Exchange Server 2019 <a href=\"https:\/\/www.microsoft.com\/en-us\/download\/details.aspx?familyID=edb31b02-83ab-4133-b327-29f3799e4861\" target=\"_blank\" rel=\"noopener noreferrer\">CU11<\/a> and <a href=\"https:\/\/www.microsoft.com\/en-us\/download\/details.aspx?id=104478\" target=\"_self\" rel=\"noopener noreferrer\">CU12<\/a><\/li>\n<\/ul>\n<p>The SUs address vulnerabilities responsibly reported to Microsoft by security partners and found through Microsoft\u2019s internal processes. Although we are not aware of any active exploits in the wild, our recommendation is to <em>immediately<\/em> install these updates to protect your environment.<\/p>\n<p>These vulnerabilities affect Exchange Server. Exchange Online customers are already protected from the vulnerabilities addressed in these SUs and do not need to take any action other than updating any Exchange servers in their environment.<\/p>\n<p>More details about specific CVEs can be found in the <a href=\"https:\/\/msrc.microsoft.com\/update-guide\/\" target=\"_blank\" rel=\"noopener noreferrer\">Security Update Guide<\/a> (filter on Exchange Server under Product Family).<\/p>\n<h1 id=\"toc-hId--2016549417\"><span id=\"manual-enablement-of-windows-extended-protection\">Manual enablement of Windows Extended Protection<\/span><\/h1>\n<p>Addressing some of CVEs released this month requires admins to enable <a href=\"https:\/\/docs.microsoft.com\/iis\/configuration\/system.webserver\/security\/authentication\/windowsauthentication\/extendedprotection\/\" target=\"_blank\" rel=\"noopener noreferrer\">Windows Extended protection<\/a> on your Exchange servers. To help you enable this feature, we have developed a script for this process. Please <em>carefully<\/em> evaluate your environment and review all known issues mentioned in the script documentation before enabling Windows Extended protection on your Exchange servers.<\/p>\n<p>Please note that enabling Extended Protection (EP) is only supported on specific versions of Exchange (please see <a href=\"https:\/\/aka.ms\/ExchangeEPDoc\" target=\"_self\" rel=\"noopener noreferrer\">documentation<\/a> for full list of prerequisites).<\/p>\n<p>The current version of this script can be found at <a href=\"https:\/\/aka.ms\/ExchangeEPScript\" target=\"_blank\" rel=\"noopener noreferrer\">https:\/\/aka.ms\/ExchangeEPScript<\/a> and the documentation is at <a href=\"https:\/\/aka.ms\/ExchangeEPDoc\" target=\"_blank\" rel=\"noopener noreferrer\">https:\/\/aka.ms\/ExchangeEPDoc<\/a>. For script and documentation changes and suggestions, please engage with us via GitHub to ensure proper issue and change tracking. The script provided to enable Extended Protection will automatically perform an automatic update if the computer on which it is executed has an internet connection (direct or via proxy). However, if you don\u2019t have internet access, make sure to download the latest version of the script as we are continuously improving it.<\/p>\n<p style=\"background: #F0F0F0; padding: .5em; margin: 1em 0 1em 0;\">It is important that you <font color=\"#DF0000\"><strong>fully understand<\/strong><\/font> Windows Extended Protection prerequisites and all known issues before running the script in your environment. Enabling Extended Protection affects communication between your Exchange servers and between clients and servers.<\/p>\n<h1 id=\"toc-hId-470963416\"><span id=\"update-installation\">Update installation<\/span><\/h1>\n<p>Update paths available:<\/p>\n<p><span>\u00a0<\/span><span><span class=\"lia-inline-image-display-wrapper lia-image-align-center\" image-alt=\"Aug2022SUsV6.jpg\" style=\"width: 999px;\"><img decoding=\"async\" src=\"https:\/\/techcommunity.microsoft.com\/t5\/image\/serverpage\/image-id\/394506i162FB12C54D4D6F3\/image-size\/large?v=v2&amp;px=999\" role=\"button\" title=\"Aug2022SUsV6.jpg\" alt=\"Aug2022SUsV6.jpg\"><\/span><\/span><\/p>\n<h2 id=\"toc-hId-1161524890\"><span id=\"inventory-your-exchange-servers-determine-which-updates-are-needed\">Inventory your Exchange Servers \/ determine which updates are needed<\/span><\/h2>\n<p>Use the <a href=\"https:\/\/aka.ms\/ExchangeHealthChecker\" target=\"_blank\" rel=\"noopener noreferrer\">Exchange Server Health Checker script<\/a> (use the latest release) to inventory your servers. Running this script will tell you if any of your Exchange Servers are behind on updates (CUs and SUs).<\/p>\n<h2 id=\"toc-hId--645929573\"><span id=\"update-to-the-latest-cumulative-update\">Update to the latest Cumulative Update<\/span><\/h2>\n<p>Go to <a href=\"https:\/\/aka.ms\/ExchangeUpdateWizard\" target=\"_blank\" rel=\"noopener noreferrer\">https:\/\/aka.ms\/ExchangeUpdateWizard<\/a> and choose your currently running CU and your target CU to get directions for your environment.<\/p>\n<h2 id=\"toc-hId-1841583260\"><span id=\"if-you-encounter-errors-during-or-after-installation-of-exchange-server-updates\">If you encounter errors during or after installation of Exchange Server updates<\/span><\/h2>\n<p>If you encounter errors during installation, see the <a href=\"https:\/\/aka.ms\/ExSetupAssist\" target=\"_blank\" rel=\"noopener noreferrer\">SetupAssist script<\/a>. If something does not work properly after updates, see <a href=\"https:\/\/docs.microsoft.com\/exchange\/troubleshoot\/client-connectivity\/exchange-security-update-issues\" target=\"_blank\" rel=\"noopener noreferrer\">Repair failed installations of Exchange Cumulative and Security updates<\/a>.<\/p>\n<h2 id=\"toc-hId-34128797\"><span id=\"known-issues-with-this-release\">Known issues with this release<\/span><\/h2>\n<p>We are not aware of any known issues with this release.<\/p>\n<h1 id=\"toc-hId-23625693\"><span id=\"faqs\">FAQs<\/span><\/h1>\n<p><strong><em>My organization is in Hybrid mode with Exchange Online. Do I need to do anything?<\/em><\/strong><br \/>While Exchange Online customers are already protected, the August 2022 SUs do need to be installed on your on-premises Exchange servers, even if they are used only for management purposes. You do <em>not<\/em> need to re-run the Hybrid Configuration Wizard (HCW) after installing updates.<\/p>\n<p><strong><em>Do I need to install the updates on \u2018Exchange Management Tools only\u2019 workstations?<br \/><\/em><\/strong>Servers or workstations running only the Management Tools role (no Exchange services) do not need these updates.<\/p>\n<p><strong>Updates to this post:<\/strong><\/p>\n<ul>\n<li>We temporarily removed and now re-added a link to Exchange 2019 CU12 update package because of the issue with original download. The date of publication on the correct package is 8\/9\/2022.<\/li>\n<\/ul>\n<p><span class=\"author\">The Exchange Server Team<\/span><\/p>\n<\/div>\n<p><a href=\"https:\/\/techcommunity.microsoft.com\/t5\/exchange-team-blog\/released-august-2022-exchange-server-security-updates\/ba-p\/3593862\">Read full article (Microsoft Exchange Blog)<\/a><\/p>\n<p>All content and images belong to their respected owners, this article is curated for informational purposes only.<\/p>\n","protected":false},"excerpt":{"rendered":"Microsoft has released security updates (SUs) for vulnerabilities found in: Exchange Server 2013 Exchange Server 2016 Exchange Server&hellip;\n","protected":false},"author":2,"featured_media":2564,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"csco_singular_sidebar":"","csco_page_header_type":"","csco_appearance_grid":"","csco_page_load_nextpost":"","csco_post_video_location":[],"csco_post_video_location_hash":"","csco_post_video_url":"","csco_post_video_bg_start_time":0,"csco_post_video_bg_end_time":0,"footnotes":""},"categories":[15],"tags":[66,67,68],"coauthors":[48],"class_list":["post-3399","post","type-post","status-publish","format-standard","has-post-thumbnail","category-microsoft-exchange-server","tag-microsoft","tag-released","tag-security","cs-entry","cs-video-wrap"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.5 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Released: August 2022 Exchange Server Security Updates | Sebae Networks<\/title>\n<meta name=\"description\" content=\"View Released: August 2022 Exchange Server Security Updates for free, here at Sebae. Discover more great posts on our website.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.sebae.net\/blog\/released-august-2022-exchange-server-security-updates\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Released: August 2022 Exchange Server Security Updates | Sebae Networks\" \/>\n<meta property=\"og:description\" content=\"View Released: August 2022 Exchange Server Security Updates for free, here at Sebae. Discover more great posts on our website.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.sebae.net\/blog\/released-august-2022-exchange-server-security-updates\/\" \/>\n<meta property=\"og:site_name\" content=\"Sebae Networks\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/sebaenetworks\" \/>\n<meta property=\"article:published_time\" content=\"2022-08-10T02:00:07+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/techcommunity.microsoft.com\/t5\/image\/serverpage\/image-id\/394506i162FB12C54D4D6F3\/image-size\/large?v=v2&amp;px=999\" \/>\n<meta name=\"author\" content=\"James Dean\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@sebaenetworks\" \/>\n<meta name=\"twitter:site\" content=\"@sebaenetworks\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"James Dean\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Released: August 2022 Exchange Server Security Updates | Sebae Networks","description":"View Released: August 2022 Exchange Server Security Updates for free, here at Sebae. Discover more great posts on our website.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.sebae.net\/blog\/released-august-2022-exchange-server-security-updates\/","og_locale":"en_GB","og_type":"article","og_title":"Released: August 2022 Exchange Server Security Updates | Sebae Networks","og_description":"View Released: August 2022 Exchange Server Security Updates for free, here at Sebae. Discover more great posts on our website.","og_url":"https:\/\/www.sebae.net\/blog\/released-august-2022-exchange-server-security-updates\/","og_site_name":"Sebae Networks","article_publisher":"https:\/\/www.facebook.com\/sebaenetworks","article_published_time":"2022-08-10T02:00:07+00:00","og_image":[{"url":"https:\/\/techcommunity.microsoft.com\/t5\/image\/serverpage\/image-id\/394506i162FB12C54D4D6F3\/image-size\/large?v=v2&amp;px=999","type":"","width":"","height":""}],"author":"James Dean","twitter_card":"summary_large_image","twitter_creator":"@sebaenetworks","twitter_site":"@sebaenetworks","twitter_misc":{"Written by":"James Dean","Estimated reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.sebae.net\/blog\/released-august-2022-exchange-server-security-updates\/#article","isPartOf":{"@id":"https:\/\/www.sebae.net\/blog\/released-august-2022-exchange-server-security-updates\/"},"author":{"name":"James Dean","@id":"https:\/\/www.sebae.net\/blog\/#\/schema\/person\/6d07e05e3d3e4483117c4e2c3315a89f"},"headline":"Released: August 2022 Exchange Server Security Updates","datePublished":"2022-08-10T02:00:07+00:00","mainEntityOfPage":{"@id":"https:\/\/www.sebae.net\/blog\/released-august-2022-exchange-server-security-updates\/"},"wordCount":671,"commentCount":0,"publisher":{"@id":"https:\/\/www.sebae.net\/blog\/#organization"},"image":{"@id":"https:\/\/www.sebae.net\/blog\/released-august-2022-exchange-server-security-updates\/#primaryimage"},"thumbnailUrl":"https:\/\/www.sebae.net\/blog\/wp-content\/uploads\/2021\/11\/exchange-server-header.png","keywords":["Microsoft","released","security"],"articleSection":["Microsoft Exchange Server"],"inLanguage":"en-GB","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.sebae.net\/blog\/released-august-2022-exchange-server-security-updates\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.sebae.net\/blog\/released-august-2022-exchange-server-security-updates\/","url":"https:\/\/www.sebae.net\/blog\/released-august-2022-exchange-server-security-updates\/","name":"Released: August 2022 Exchange Server Security Updates | Sebae Networks","isPartOf":{"@id":"https:\/\/www.sebae.net\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.sebae.net\/blog\/released-august-2022-exchange-server-security-updates\/#primaryimage"},"image":{"@id":"https:\/\/www.sebae.net\/blog\/released-august-2022-exchange-server-security-updates\/#primaryimage"},"thumbnailUrl":"https:\/\/www.sebae.net\/blog\/wp-content\/uploads\/2021\/11\/exchange-server-header.png","datePublished":"2022-08-10T02:00:07+00:00","description":"View Released: August 2022 Exchange Server Security Updates for free, here at Sebae. Discover more great posts on our website.","breadcrumb":{"@id":"https:\/\/www.sebae.net\/blog\/released-august-2022-exchange-server-security-updates\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.sebae.net\/blog\/released-august-2022-exchange-server-security-updates\/"]}]},{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/www.sebae.net\/blog\/released-august-2022-exchange-server-security-updates\/#primaryimage","url":"https:\/\/www.sebae.net\/blog\/wp-content\/uploads\/2021\/11\/exchange-server-header.png","contentUrl":"https:\/\/www.sebae.net\/blog\/wp-content\/uploads\/2021\/11\/exchange-server-header.png","width":1920,"height":1080,"caption":"exchange server header"},{"@type":"BreadcrumbList","@id":"https:\/\/www.sebae.net\/blog\/released-august-2022-exchange-server-security-updates\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.sebae.net\/blog\/"},{"@type":"ListItem","position":2,"name":"Released: August 2022 Exchange Server Security Updates"}]},{"@type":"WebSite","@id":"https:\/\/www.sebae.net\/blog\/#website","url":"https:\/\/www.sebae.net\/blog\/","name":"Sebae Networks","description":"Tech Tips, News, Tutorials &amp; Advice","publisher":{"@id":"https:\/\/www.sebae.net\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.sebae.net\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Organization","@id":"https:\/\/www.sebae.net\/blog\/#organization","name":"Sebae","url":"https:\/\/www.sebae.net\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/www.sebae.net\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.sebae.net\/blog\/wp-content\/uploads\/2023\/06\/sebae-logo-icon.png","contentUrl":"https:\/\/www.sebae.net\/blog\/wp-content\/uploads\/2023\/06\/sebae-logo-icon.png","width":512,"height":512,"caption":"Sebae"},"image":{"@id":"https:\/\/www.sebae.net\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/sebaenetworks","https:\/\/x.com\/sebaenetworks"]},{"@type":"Person","@id":"https:\/\/www.sebae.net\/blog\/#\/schema\/person\/6d07e05e3d3e4483117c4e2c3315a89f","name":"James Dean","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/www.sebae.net\/blog\/wp-content\/uploads\/2021\/10\/avatar_user_2_1634496168-96x96.jpg72371c27260698ee55141397050ef40a","url":"https:\/\/www.sebae.net\/blog\/wp-content\/uploads\/2021\/10\/avatar_user_2_1634496168-96x96.jpg","contentUrl":"https:\/\/www.sebae.net\/blog\/wp-content\/uploads\/2021\/10\/avatar_user_2_1634496168-96x96.jpg","caption":"James Dean"},"sameAs":["https:\/\/www.sebae.net"],"url":"https:\/\/www.sebae.net\/blog\/author\/jdean\/"}]}},"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/www.sebae.net\/blog\/wp-json\/wp\/v2\/posts\/3399","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.sebae.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.sebae.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.sebae.net\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.sebae.net\/blog\/wp-json\/wp\/v2\/comments?post=3399"}],"version-history":[{"count":0,"href":"https:\/\/www.sebae.net\/blog\/wp-json\/wp\/v2\/posts\/3399\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.sebae.net\/blog\/wp-json\/wp\/v2\/media\/2564"}],"wp:attachment":[{"href":"https:\/\/www.sebae.net\/blog\/wp-json\/wp\/v2\/media?parent=3399"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.sebae.net\/blog\/wp-json\/wp\/v2\/categories?post=3399"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.sebae.net\/blog\/wp-json\/wp\/v2\/tags?post=3399"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/www.sebae.net\/blog\/wp-json\/wp\/v2\/coauthors?post=3399"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}