CVSS 8.8 Critical EXPLOITED Patched 2022

CVE-2022-41040

Microsoft Exchange Server Server-Side Request Forgery (SSRF) vulnerability. It was used as the first link in the ProxyNotShell chain and was exploited by Qakbot and other threat actors.

KEYDAL kSentinel Vulnerability Analyst

Vulnerability Profile

CVSS Score 8.8 / 10.0

Severity Critical

Exploitation Status ⚠ Active Exploitation

Patch Status ✓ Patch Available

Affected Software Microsoft Exchange Server

Exploitation Method SSRF/RCE Chain

MITRE ATT&CK T1190 - Exploit Public-Facing Application

CVE-2022-41040 Analizi

Microsoft Exchange Server Server-Side Request Forgery (SSRF) acigi. ProxyNotShell zincirinin ilk halkasi olarak kullanilmis, Qakbot ve diger tehdit aktörleri tarafindan istismar edilmistir.

Teknik Detaylar

CVSS Skoru: 8.8/10
Etkilenen Urun: Microsoft Exchange Server
Istismar Turu: SSRF/RCE Chain
MITRE Teknik: T1190 - Exploit Public-Facing Application

Malware Families Exploiting This Vulnerability

Similar Vulnerabilities

← All CVEs