Description
Microsoft Exchange Server Remote Code Execution Vulnerability
Metrics
CVSS 3.1 8.5/10
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Microsoft Exchange Server 2019 Cumulative Update 6 | >= 15.02.0, < publication |
| Microsoft | Microsoft Exchange Server 2016 Cumulative Update 17 | >= 15.01.0, < publication |
| Microsoft | Microsoft Exchange Server 2019 Cumulative Update 7 | >= 15.02.0, < publication |
| Microsoft | Microsoft Exchange Server 2016 Cumulative Update 18 | >= 15.01.0, < publication |
| Microsoft | Microsoft Exchange Server 2013 Cumulative Update 23 | >= 15.00.0, < publication |
References
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17084Patch, Vendor Advisory
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17084Patch, Vendor Advisory
Timeline
- Published
- Nov 11, 2020
- Last modified
- Jun 17, 2026
- NVD status
- Modified