Lucene search
MicrosoftMS:CVE-2022-41040HistorySep 30, 2022 - 7:00 a.m.
Microsoft Exchange Server Elevation of Privilege Vulnerability
2022-09-3007:00:00
Microsoft
msrc.microsoft.com
183
microsoft
exchange server
privilege
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.952
Percentile
99.4%
Affected configurations
Node
microsoftexchange_serverRange<15.01.2507.016
ORmicrosoftexchange_serverRange<15.02.1118.020
ORmicrosoftexchange_serverRange<15.02.0986.036
ORmicrosoftexchange_serverRange<15.01.2375.037
ORmicrosoftexchange_serverRange<15.00.1497.044
| Vendor | Product | Version | CPE |
|---|---|---|---|
| microsoft | exchange_server | * | cpe:2.3:a:microsoft:exchange_server:*:*:*:*:*:*:*:* |
Related
attackerkb
attackerkb
CVE-2022-41040
2022-10-03 00:00:00
CVE-2022-41082
2022-10-03 00:00:00
hackerone
hackerone
githubexploit
githubexploit
Exploit for Improper Privilege Management in Microsoft
2022-10-20 22:14:04
Exploit for Improper Privilege Management in Microsoft
2022-10-04 03:50:10
Exploit for Server-Side Request Forgery in Microsoft
2022-10-20 03:11:03
prion
prion
Privilege escalation
2022-10-03 01:15:00
zdi
zdi
nvd
nvd
CVE-2022-41040
2022-10-03 01:15:08
cnvd
cnvd
cvelist
cvelist
cve
cve
CVE-2022-41040
2022-10-03 01:15:08
hackread
hackread
Microsoft Confirms Two 0-Days Being Exploited Against Exchange Servers
2022-09-30 17:56:35
krebs
krebs
Microsoft: Two New 0-Day Flaws in Exchange Server
2022-09-30 16:51:57
Patch Tuesday, November 2022 Election Edition
2022-11-09 01:50:14
malwarebytes
malwarebytes
[updated]Two new Exchange Server zero-days in the wild
2022-09-30 13:00:00
Rackspace confirms it suffered a ransomware attack
2022-12-08 12:00:00
thn
thn
qualysblog
qualysblog
cert
cert
talosblog
talosblog
cisa_kev
cisa_kev
Microsoft Exchange Server Server-Side Request Forgery Vulnerability
2022-09-30 00:00:00
Microsoft Exchange Server Remote Code Execution Vulnerability
2022-09-30 00:00:00
rapid7blog
rapid7blog
CVE-2022-41040 and CVE-2022-41082: Unpatched Zero-Day Vulnerabilities in Microsoft Exchange Server
2022-09-29 20:50:50
Year in Review: Rapid7 Vulnerability Management
2023-01-09 17:00:00
Patch Tuesday - November 2022
2022-11-08 20:02:57
msrc
msrc
mssecure
mssecure
packetstorm
packetstorm
Microsoft Exchange ProxyNotShell Remote Code Execution
2022-11-30 00:00:00
nessus
nessus
Security Updates for Microsoft Exchange Server (Nov 2022)
2022-11-11 00:00:00
cisa
cisa
checkpoint_advisories
checkpoint_advisories
wordfence
wordfence
hivepro
hivepro
Unpatched zero-day vulnerabilities of Microsoft Exchange Server
2022-09-30 10:21:56
mmpc
mmpc
metasploit
metasploit
Microsoft Exchange ProxyNotShell RCE
2022-11-18 22:00:27
kaspersky
kaspersky
KLA19264 Multiple vulnerabilities in Microsoft Server Software
2022-09-30 00:00:00
akamaiblog
akamaiblog
impervablog
impervablog
Microsoft Exchange Server Vulnerabilities CVE-2022-41040 and CVE-2022-41082
2022-09-30 16:47:34
ics
ics
#StopRansomware: Play Ransomware
2023-12-18 12:00:00
securelist
securelist
CVE-2022-41040 and CVE-2022-41082 – zero-days in MS Exchange
2022-12-19 16:15:49
IT threat evolution in Q3 2022. Non-mobile statistics
2022-11-18 08:10:34
trellix
trellix
The Bug Report October 2022 Edition
2022-11-02 00:00:00
The Bug Report October 2022 Edition
2022-11-02 00:00:00
mskb
mskb
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.952
Percentile
99.4%
Related for MS:CVE-2022-41040