Exchange must have the most current, approved Cumulative Update (CU) installed.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
| V-259644 | EX19-ED-000244 | SV-259644r961683_rule | Medium |
| Description |
| The organization (including any contractor to the organization) must promptly install security-relevant software updates (e.g., patches, service packs, CUs, hot fixes). Flaws discovered during security assessments, continuous monitoring, incident response activities, or information system error handling must also be addressed. |
| STIG | Date |
| Microsoft Exchange 2019 Edge Server Security Technical Implementation Guide | 2024-12-06 |
Details
| Check Text (C-63383r942244_chk) |
| Open the Exchange Management Shell and enter the following command: Get-ExchangeServer | Format-List Name, AdminDisplayVersion If the value of "AdminDisplayVersion" does not return the most current, approved CU, this is a finding. |
| Fix Text (F-63291r942245_fix) |
| Install the most current, approved CU. |