cve entity

CVE-2022-41082

3 source-linked records in the current knowledge graph.

Jan 10, 2023high

CVE-2022-41080: Microsoft Exchange Server Privilege Escalation Vulnerability

Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation. This vulnerability is chainable with CVE-2022-41082, which allows for remote code execution. Required action: Apply updates per vendor instructions.

CVE-2022-41080CVE-2022-41082EPSS 100.0%Exchange ServerMicrosoft

CISA KEV ↗ · unattributed attribution

Sep 30, 2022high

CVE-2022-41082: Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Exchange Server contains an unspecified vulnerability that allows for authenticated remote code execution. Dubbed "ProxyNotShell," this vulnerability is chainable with CVE-2022-41040 which allows for the remote code execution. Required action: Apply updates per vendor instructions.

CVE-2022-41040CVE-2022-41082EPSS 100.0%Exchange ServerMicrosoft

CISA KEV ↗ · unattributed attribution

Sep 30, 2022high

CVE-2022-41040: Microsoft Exchange Server Server-Side Request Forgery Vulnerability

Microsoft Exchange Server allows for server-side request forgery. Dubbed "ProxyNotShell," this vulnerability is chainable with CVE-2022-41082 which allows for remote code execution. Required action: Apply updates per vendor instructions.

CVE-2022-41040CVE-2022-41082EPSS 100.0%Exchange ServerMicrosoft

CISA KEV ↗ · unattributed attribution