CVE-2020-17144

high · 8.4Actively exploited

On the CISA Known Exploited Vulnerabilities catalog

Apply updates per vendor instructions.

Added 2021-11-03Remediation due 2022-05-03

Microsoft Exchange Remote Code Execution Vulnerability

8.4

CVSS

36.5%

EPSS (exploit prob.)

98th

EPSS percentile

2020-12-10

Published

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H

Weaknesses

CWE-502

Vendor	Product	Affected versions
microsoft	exchange_server	2010

Check a specific version with /api/v1/cve/match.

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2020-17144