   CVE-2021-26855: Microsoft Exchange Server Remote Code Execution Vulnerability (pre-authenticated Server-Side Request Forgery [SSRF]) CVE-2021-27065: Microsoft Exchange Server Remote Code Execution Vulnerability (post-authenticated Arbitrary File Write)         Fig - MS Exchange Client Access Protocol Architecture     The Client Access services (Outlook Web App portal) proxies the incoming connections to the Backend services.