7.4
CVE-2018-8581
- EPSS 90.92%
- Published 14.11.2018 01:29:01
- Last modified 04.04.2025 20:30:27
- Source secure@microsoft.com
- Teams watchlist Login
- Open Login
An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka "Microsoft Exchange Server Elevation of Privilege Vulnerability." This affects Microsoft Exchange Server.
Data is provided by the National Vulnerability Database (NVD)
Microsoft ≫ Exchange Server Version2010 Update-
Microsoft ≫ Exchange Server Version2013 Update-
Microsoft ≫ Exchange Server Version2016 Update-
Microsoft ≫ Exchange Server Version2019 Update-
03.03.2022: CISA Known Exploited Vulnerabilities (KEV) Catalog
Microsoft Exchange Server Privilege Escalation Vulnerability
VulnerabilityA privilege escalation vulnerability exists in Microsoft Exchange Server. An attacker who successfully exploited this vulnerability could attempt to impersonate any other user of the Exchange server.
DescriptionApply updates per vendor instructions.
Required actions| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 90.92% | 0.996 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 7.4 | 2.2 | 5.2 |
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
|
| nvd@nist.gov | 5.8 | 8.6 | 4.9 |
AV:N/AC:M/Au:N/C:P/I:P/A:N
|
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | 7.4 | 2.2 | 5.2 |
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
|