CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2022-11-09
Microsoft Exchange Server Elevation of Privilege Vulnerability (CVE-2022-41080) Security Advisory
[Affected Scope] Microsoft Exchange Server 2013, 2016, and 2019 on-premises environments.
[Impact] An authenticated attacker can leverage Remote PowerShell sessions to elevate privileges to SYSTEM, potentially leading to Remote Code Execution (RCE).
[Mitigation] Immediately apply the latest Cumulative Updates (CU) and Security Updates (SU) provided by Microsoft, and restrict unnecessary Remote PowerShell access.