KEVIntel
Back to KEVs
7.4
CVSS
High

CVE-2018-8581

PUBLISHED

An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka "Microsoft Exchange Server Elevation of Privilege Vulnerability."...

Exploited in the wild Used in malware Remote No user interaction
Vendor
Microsoft
Product
Microsoft Exchange Server
Published
Nov 14, 2018
EPSS
—

Description

An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka "Microsoft Exchange Server Elevation of Privilege Vulnerability." This affects Microsoft Exchange Server.

cisa malware ransomware microsoft

CVSS scores

CVSS v3.1 7.4 High

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

CVSS v2.0 5.8

AV:N/AC:M/Au:N/C:P/I:P/A:N

Exploitation status

Exploited in the wild

Recorded 2022-03-03 00:00:00 UTC · Source

Used in malware

Recorded 2022-03-03 00:00:00 UTC · Source

SSVC decision points

Exploitation
active
Automatable
No
Technical impact
total

References

Known exploited vulnerability sources

Catalogues that list this CVE as a known exploited vulnerability.

Source Added
CISA Mar 03, 2022

Potential proof of concepts

These PoCs are unverified and could contain malware. Use at your own risk.

qiantu88/CVE-2018-8581

github · Created 2018-12-28 15:47:32 UTC · 5 stars

CVE-2018-8581

WyAtu/CVE-2018-8581

github · Created 2018-12-27 06:30:32 UTC · 332 stars

CVE-2018-8581 | Microsoft Exchange Server Elevation of Privilege Vulnerability

Timeline

  • CVE ID Reserved

  • CVE Published to Public

  • Exploit Used in Malware

  • Added to KEVIntel