CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2020-02-11
Microsoft Exchange Server Remote Code Execution (RCE) Vulnerability Analysis and Mitigation Guide (CVE-2020-0688)
[Affected Scope] Microsoft Exchange Server 2010, 2013, 2016, and 2019
[Impact] An authenticated attacker can exploit static cryptographic keys to forge ASP.NET ViewState data, leading to arbitrary code execution with SYSTEM privileges via the Exchange Control Panel (ECP)
[Mitigation] Apply the official Microsoft Cumulative Update (CU) and security patches immediately, and regenerate unique ViewState validation/decryption keys