KEVIntel
Back to KEVs
8.8
CVSS
High

CVE-2022-41080

PUBLISHED

Microsoft Exchange Server Elevation of Privilege Vulnerability

Exploited in the wild Used in malware Remote Low complexity No user interaction
Vendor
Microsoft
Product
Microsoft Exchange Server 2016 Cumulative Update 23, Microsoft Exchange Server 2019 Cumulative Update 12, Microsoft Exchange Server 2013 Cumulative Update 23, Microsoft Exchange Server 2019 Cumulative Update 11, Microsoft Exchange Server 2016 Cumulative Update 22
Published
Nov 09, 2022
EPSS
—

Description

Microsoft Exchange Server Elevation of Privilege Vulnerability

cisa malware ransomware microsoft nessus_scanner

CVSS scores

CVSS v3.1 8.8 High

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation status

Exploited in the wild

Recorded 2023-01-10 00:00:00 UTC · Source

Used in malware

Recorded 2023-01-10 00:00:00 UTC · Source

SSVC decision points

Exploitation
active
Automatable
No
Technical impact
total

References

Known exploited vulnerability sources

Catalogues that list this CVE as a known exploited vulnerability.

Source Added
CISA Jan 10, 2023

Scanner integrations

Scanner Reference Detected
Nessus https://www.tenable.com/plugins/nessus/167281 Jun 02, 2025

Timeline

  • CVE ID Reserved

  • CVE Published to Public

  • Exploit Used in Malware

  • Added to KEVIntel

  • Detected by Nessus