CVE-2018-8581

Warnung

EPSS 27.36%
Veröffentlicht 14.11.2018 01:29:01
Zuletzt bearbeitet 28.10.2025 14:12:33
Erkennungen
Login

An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka "Microsoft Exchange Server Elevation of Privilege Vulnerability." This affects Microsoft Exchange Server.

Betroffene Produkte Warnungen 1 Metriken 4 CWE 0 Referenzen 7

NVD 4 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ Exchange Server Version 2010 Update -

Microsoft ≫ Exchange Server Version 2013 Update -

Microsoft ≫ Exchange Server Version 2016 Update -

Microsoft ≫ Exchange Server Version 2019 Update -

03.03.2022: CISA Known Exploited Vulnerabilities (KEV) Catalog

Microsoft Exchange Server Privilege Escalation Vulnerability

Schwachstelle

A privilege escalation vulnerability exists in Microsoft Exchange Server. An attacker who successfully exploited this vulnerability could attempt to impersonate any other user of the Exchange server.

Beschreibung

Apply updates per vendor instructions.

Erforderliche Maßnahmen

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	27.36%	0.978

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.4	2.2	5.2	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
NIST	5.8	8.6	4.9	AV:N/AC:M/Au:N/C:P/I:P/A:N
CISA-ADP	7.4	2.2	5.2	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N