VDB

BDU%3A2020-00948

BDU%3A2020-00948 PUBLISHED CVSS 9 CRITICAL

Уязвимость почтового сервера Microsoft Exchange Server, связанная с недостатками механизма десериализации, позволяющая нарушителю выполнить произвольный код

Risk Scores

CVSS 2.0
9

Affected Products

VendorProductVersions
MicrosoftMicrosoft Exchange Server 2019 Cumulative Update 4*
MicrosoftMicrosoft Exchange Server 2019 Cumulative Update 3*
MicrosoftMicrosoft Exchange Server 2013Cumulative Update 23
MicrosoftMicrosoft Exchange Server 2016 Cumulative Update 14*
MicrosoftMicrosoft Exchange Server 2010 Service Pack 3 Update Rollup 30unspecified
Microsoft CorpMicrosoft Exchange Server
MicrosoftMicrosoft Exchange Server 2016 Cumulative Update 15unspecified

Timeline

  • Feb 26, 2020 PoC Published
  • Mar 3, 2020 PoC Published
  • Mar 5, 2020 PoC Published
  • Mar 10, 2020 CVE Published
  • Mar 11, 2020 PoC Published
  • Sep 16, 2020 PoC Published
  • Oct 9, 2020 PoC Published
  • Oct 16, 2020 PoC Published
  • Oct 20, 2020 PoC Published
  • Oct 20, 2020 PoC Published
  • Oct 21, 2020 PoC Published
  • Oct 22, 2020 PoC Published

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›