CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Reset
Showing 1โ€“1 of 1 advisories (Page 1/1)
CVE-2020-171448.4/HIGHEPSS 36.5%CISA KEV
2020-12-10

Microsoft Exchange Server Remote Code Execution (RCE) Vulnerability Analysis and Mitigation Guide (CVE-2020-17144)

[Affected Scope] Microsoft Exchange Server 2010 Service Pack 3, 2013, 2016, and 2019

[Impact] An authenticated attacker can send specially crafted payloads to execute arbitrary code with SYSTEM privileges, leading to full server compromise

[Mitigation] Immediately apply the official Microsoft security updates and restrict external access to Exchange management interfaces

CVE Vulnerability Advisory Database (CVSS ยท CISA KEV ยท EPSS) | CVE Pulse