CVE-2018-8581 An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka "Microsoft Exchange Server Elevation of Privilege Vulnerability." This affects Microsoft Exchange Server.
HighCVSS 7.4
EPSS 27.6%
CISA KEV
added 2022-03-03 · due 2022-03-17
Ransomware
Exploited in the wild
- Published
- Updated
- Exploit status
- Exploited in the wild (confirmed)
Description
An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka "Microsoft Exchange Server Elevation of Privilege Vulnerability." This affects Microsoft Exchange Server.
CISA Known Exploited Vulnerability
- Date added
- 2022-03-03
- Due date (FCEB)
- 2022-03-17
- Ransomware use
- Known
Required action
Apply updates per vendor instructions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft exchange server | = 2010 | No fix listed |
| Microsoft exchange server | = 2013 | No fix listed |
| Microsoft exchange server | = 2016 | No fix listed |
| Microsoft exchange server | = 2019 | No fix listed |
| Microsoft Exchange Server | = 2010 | No fix listed |
| Microsoft Exchange Server | = 2013 | No fix listed |
| Microsoft Exchange Server | = 2016 | No fix listed |
| Microsoft Exchange Server | = 2019 | No fix listed |
References
- 105837 broken-link third-party-advisory vdb-entry
- 1042141 broken-link third-party-advisory vdb-entry
- portal.msrc.microsoft.com patch vendor-advisory
- www.cisa.gov government-resource us-government-resource