← Back to Microsoft Exchange 2019 Edge Server Security Technical Implementation Guide

V-259644

CAT II (Medium)

Exchange must have the most current, approved Cumulative Update (CU) installed.

Rule ID

SV-259644r961683_rule

STIG

Microsoft Exchange 2019 Edge Server Security Technical Implementation Guide

Version

V2R2

CCIs

CCI-002605

Discussion

The organization (including any contractor to the organization) must promptly install security-relevant software updates (e.g., patches, service packs, CUs, hot fixes). Flaws discovered during security assessments, continuous monitoring, incident response activities, or information system error handling must also be addressed.

Check Content

Open the Exchange Management Shell and enter the following command:

Get-ExchangeServer | Format-List Name, AdminDisplayVersion

If the value of "AdminDisplayVersion" does not return the most current, approved CU, this is a finding.

Fix Text

Install the most current, approved CU.