BDU:2020-00948

Scores

EPSS Score

0.0000

CVSS

3.x 8.8

Vector: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

All CVSS Scores

CVSS 4.0
0.0
CVSS 3.x
8.8

Vector: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS 2.0
9.0

Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C

Description

Уязвимость почтового сервера Microsoft Exchange Server связана с недостатками механизма десериализации. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код

Sources

bdu

Related Vulnerabilities

Vulnerable Software

Type: Configuration

Vendor: microsoft corp.

Product: microsoft exchange server

Operating System: * *

Trait:
{
  "version_exact": "2019 Cumulative Update 3"
}

Source: bdu

Type: Configuration

Vendor: microsoft corp.

Product: microsoft exchange server

Operating System: * *

Trait:
{
  "version_exact": "2019 Cumulative Update 14"
}

Source: bdu

Type: Configuration

Vendor: microsoft corp.

Product: microsoft exchange server

Operating System: * *

Trait:
{
  "version_exact": "2010 Service Pac 3 Update Rollup30"
}

Source: bdu

Type: Configuration

Vendor: microsoft corp.

Product: microsoft exchange server

Operating System: * *

Trait:
{
  "version_exact": "2013 Cumulative Update 23"
}

Source: bdu

Type: Configuration

Vendor: microsoft corp.

Product: microsoft exchange server

Operating System: * *

Trait:
{
  "version_exact": "2016 Cumulative Update 14"
}

Source: bdu