CVE-2020-0903: falha de média gravidade em Microsoft Exchange Server 2016 Cumulative…
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.4epss 1.6%
A cross-site-scripting (XSS) vulnerability exists when Microsoft Exchange Server does not properly sanitize a specially crafted web request to an affected Exchange server, aka 'Microsoft Exchange Server Spoofing Vulnerability'.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Produtos afetados
Microsoft · Microsoft Exchange Server 2016 Cumulative Update 14Microsoft · Microsoft Exchange Server 2016 Cumulative Update 15Microsoft · Microsoft Exchange Server 2019 Cumulative Update 3Microsoft · Microsoft Exchange Server 2019 Cumulative Update 4CVEs relacionadas — Microsoft Exchange Server 2016 Cumulative…
No mesmo produto, das mais perigosas para as menos.
CVE-2021-26855CRITICALMicrosoft Exchange Server Remote Code Execution VulnerabilityEPSS 100.0%KEVCVE-2020-0688HIGHCVE-2020-0688EPSS 100.0%KEVCVE-2021-27065HIGHMicrosoft Exchange Server Remote Code Execution VulnerabilityEPSS 99.9%KEVCVE-2021-26857HIGHMicrosoft Exchange Server Remote Code Execution VulnerabilityEPSS 95.8%KEVCVE-2021-26858HIGHMicrosoft Exchange Server Remote Code Execution VulnerabilityEPSS 93.7%KEVCVE-2019-1373—CVE-2019-1373EPSS 21.7%