8.8
Élevée
CVE-2020-0688 Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability
Exploitation active constatée
· catalogue CISA KEV
Action attendue
Apply updates per vendor instructions.
Campagnes de rançongiciel
Utilisation connue
Faiblesse
CWE-287
Description
A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka 'Microsoft Exchange Memory Corruption Vulnerability'.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Microsoft Exchange Server 2013 | Versions non publiées | |
| Microsoft Exchange Server 2019 Cumulative Update 3 | Versions non publiées | |
| Microsoft Exchange Server 2016 Cumulative Update 14 | Versions non publiées | |
| Microsoft Exchange Server 2016 Cumulative Update 15 | Versions non publiées | |
| Microsoft Exchange Server 2019 Cumulative Update 4 | Versions non publiées | |
| Microsoft Exchange Server 2010 Service Pack 3 Update Rollup 30 | Versions non publiées |
Autres CVE de Microsoft Exchange Server 2013
Les 10 CVE de Microsoft Exchange Server 2013 →
CVE-2020-0692
An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of…
Non notée
CVE-2019-1373
A remote code execution vulnerability exists in Microsoft Exchange through the deserialization of metadata via…
Non notée
CVE-2019-1137
A cross-site-scripting (XSS) vulnerability exists when Microsoft Exchange Server does not properly sanitize a…
Non notée
CVE-2019-1136
An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of…
Non notée