CVE-2020-16875

HighCVSS 8.4/10Last modified Jun 17, 2026

Description

A remote code execution vulnerability exists in Microsoft Exchange server due to improper validation of cmdlet arguments. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the System user. Exploitation of the vulnerability requires an authenticated user in a certain Exchange role to be compromised. The security update addresses the vulnerability by correcting how Microsoft Exchange handles cmdlet arguments.

Metrics

CVSS 3.1 8.4/10CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-74 CWE-269

Affected software

Vendor	Product	Versions
Microsoft	Microsoft Exchange Server 2019 Cumulative Update 5	>= 15.02.0, < publication
Microsoft	Microsoft Exchange Server 2019 Cumulative Update 6	>= 15.02.0, < publication
Microsoft	Microsoft Exchange Server 2016 Cumulative Update 16	>= 15.01.0, < publication
Microsoft	Microsoft Exchange Server 2016 Cumulative Update 17	>= 15.01.0, < publication

References

http://packetstormsecurity.com/files/159210/Microsoft-Exchange-Server-DlpUtils-AddTenantDlpPolicy-Remote-Code-Execution.htmlExploit, Third Party Advisory, VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16875Patch, Vendor Advisory
http://packetstormsecurity.com/files/159210/Microsoft-Exchange-Server-DlpUtils-AddTenantDlpPolicy-Remote-Code-Execution.htmlExploit, Third Party Advisory, VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16875Patch, Vendor Advisory

Timeline

Published: Sep 11, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-168767.1An elevation of privilege vulnerability exists when the Windows Application Compatibility Client Library improperly handles registry oper CVE-2020-168777.1An elevation of privilege vulnerability exists when Microsoft Windows improperly handles reparse points. An attacker who successfully exp CVE-2020-168785.4A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web CVE-2020-168795.5An information disclosure vulnerability exists when a Windows Projected Filesystem improperly handles file redirections. An attacker who CVE-2020-16886.5On Juniper Networks SRX Series and NFX Series, a local authenticated user with access to the shell may obtain the Web API service private ke CVE-2020-168817.8A remote code execution vulnerability exists in Visual Studio Code when a user is tricked into opening a malicious 'package.json' file. A CVE-2020-168844.2A remote code execution vulnerability exists in the way that the IEToEdge Browser Helper Object (BHO) plugin on Internet Explorer handles CVE-2020-168857.8An elevation of privilege vulnerability exists when the Windows Storage VSP Driver improperly handles file operations. An attacker who su CVE-2020-168865.3A security feature bypass vulnerability exists in the PowerShellGet V2 module. An attacker who successfully exploited this vulnerability CVE-2020-168877.8An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory. An atta CVE-2020-168895.5An information disclosure vulnerability exists when the Windows KernelStream improperly handles objects in memory. An attacker who succes CVE-2020-16896.5On Juniper Networks EX4300-MP Series, EX4600 Series and QFX5K Series deployed in a Virtual Chassis configuration, receipt of a stream of spe