Microsoft has released security updates (SUs) for vulnerabilities found in:
Exchange Server 2013
Exchange Server 2016
Exchange Server 2019
IMPORTANT: Updates are released in a self-extrac...
Updated Aug 11, 2022
Version 8.0
Blog Post
LukasSMSFT thanks for the information. My Exchange server only has the mailbox server role, but it's not being used as this was and still is configured in Hybrid mode from years ago when we moved to Office 365 Exchange Online. No mailboxes reside on the server, receive and send connectors are disabled, etc.
We only kept it around for the management aspect of Exchange attributes in AD objects. We're not running a Modern Hybrid configuration either. Does patching it and enabling extended protection still apply? I've been reading how this extended protection as caused other things to break and need to be applied to EWS on the server only, etc. but again we're not using this server for any mail related services.