Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability
Overdue
Microsoft / Exchange Server
Known Ransomware Use
CWE-287
Description
Microsoft Exchange Server Validation Key fails to properly create unique keys at install time, allowing for remote code execution.
Required Action
Apply updates per vendor instructions.
Additional Information
- Catalog Version
- 2025.01.24
- Catalog Released
- Jan. 24, 2025
- Days Until Due
- 0 days
- Last Updated
- 5 months ago