Loading HuntDB...

Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability

Added Nov. 3, 2021 Due May 3, 2022 CVE-2020-0688
Overdue Microsoft / Exchange Server Known Ransomware Use CWE-287

Description

Microsoft Exchange Server Validation Key fails to properly create unique keys at install time, allowing for remote code execution.

Required Action

Apply updates per vendor instructions.

References

Additional Information

Catalog Version
2025.01.24
Catalog Released
Jan. 24, 2025
Days Until Due
0 days
Last Updated
5 months ago