8.4
High
Exploited
CVE-2020-17144 Microsoft Exchange Server Remote Code Execution Vulnerability
Active exploitation observed
· CISA KEV catalogue
Required action
Apply updates per vendor instructions.
Ransomware campaigns
Not observed so far
Weakness
CWE-502
Description
Microsoft Exchange Remote Code Execution Vulnerability
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft Exchange Server 2010 Service Pack 3 Update Rollup 31 | Versions not published |
References
- Microsoft Exchange Remote Code Execution Vulnerability msrc.microsoft.com
Timeline
- Published
- Added to the KEV catalogue
- Last modified