CVE-2020-17144

HighCVSS 8.4/10Known exploited (CISA KEV)Last modified Jun 17, 2026

Description

Microsoft Exchange Remote Code Execution Vulnerability

Metrics

CVSS 3.1 8.4/10CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-502

Affected software

No affected versions have been published.

Timeline

Published
Dec 10, 2020
Last modified
Jun 17, 2026
Added to CISA KEV
Nov 3, 2021
NVD status
Analyzed

Related CVEs from 2020

CVE-2020-171455.4Azure DevOps Server and Team Foundation Services Spoofing VulnerabilityCVE-2020-171478.7Dynamics CRM Webclient Cross-site Scripting VulnerabilityCVE-2020-171487.8Visual Studio Code Remote Development Extension Remote Code Execution VulnerabilityCVE-2020-171507.8Visual Studio Code Remote Code Execution VulnerabilityCVE-2020-171528.8Microsoft Dynamics 365 for Finance and Operations (on-premises) Remote Code Execution VulnerabilityCVE-2020-171534.3Microsoft Edge for Android Spoofing VulnerabilityCVE-2020-171567.8Visual Studio Remote Code Execution VulnerabilityCVE-2020-171588.8Microsoft Dynamics 365 for Finance and Operations (on-premises) Remote Code Execution VulnerabilityCVE-2020-171597.8Visual Studio Code Java Extension Pack Remote Code Execution VulnerabilityCVE-2020-17168.8A flaw was found in the ceph-ansible playbook where it contained hardcoded passwords that were being used as default passwords while deployiCVE-2020-171628.8Microsoft Windows Security Feature Bypass VulnerabilityCVE-2020-171637.8Visual Studio Code Python Extension Remote Code Execution Vulnerability