CVSS 8.8 High EXPLOITED Patched 2022

CVE-2022-41082

Microsoft Exchange Server remote code execution vulnerability (ProxyNotShell). Used with CVE-2022-41040, which bypasses authentication.

KEYDAL kSentinel Vulnerability Analyst

NVD Record →

Vulnerability Profile

CVSS Score 8.8 / 10.0

Severity High

Exploitation Status ⚠ Active Exploitation

Patch Status ✓ Patch Available

Affected Software Microsoft Exchange Server

Exploitation Method RCE via SSRF + RCE chain

MITRE ATT&CK T1190 - Exploit Public-Facing Application

CVE-2022-41082 — Teknik Detaylar

Microsoft Exchange Server uzaktan kod yurütme acigi (ProxyNotShell). Kimlik dogrulamayı atlayan CVE-2022-41040 ile birlikte kullanılır.

← All CVEs