CVE-2020-0688
Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability
CVSS
—
Sem CVSS
EPSS
100.0%
p100
KEV
SIM
3 de nov. de 2021
Exploit Today
80
0-100
Publicado: — · Última mod.: —
100.0%EPSS · 30 dias100.0%
2026-10-082026-11-05
Produto
Microsoft / Exchange Server
Vulnerabilidade
Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability
Adicionado ao KEV
3 de nov. de 2021
Corrigir até
3 de mai. de 2022
Uso conhecido em ransomware
Sim
Descrição resumida
Microsoft Exchange Server Validation Key fails to properly create unique keys at install time, allowing for remote code execution.
Ação necessária
Apply updates per vendor instructions.
Notas
https://nvd.nist.gov/vuln/detail/CVE-2020-0688
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2023-215298.8 ALT99.1%
KEV—80Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability78dCVE-2022-410808.8 ALT99.6%
KEV—80Microsoft Exchange Server Privilege Escalation Vulnerability87dCVE-2021-345239.0 CRÍ100.0%
KEV—80Microsoft Exchange Server Privilege Escalation Vulnerability87dCVE-2021-344739.1 CRÍ100.0%
KEV—80Microsoft Exchange Server Remote Code Execution Vulnerability87dCVE-2021-337667.3 ALT99.9%
KEV—80Microsoft Exchange Server Information Disclosure87dCVE-2021-311967.2 ALT99.0%
KEV—80Microsoft Exchange Server Information Disclosure Vulnerability87d