CVE-2023-35368
HighCVSS 8.8Exploitation Probability (EPSS)
High risk83th percentile - higher than 83% of all known CVEs
Summary
A vulnerability in Microsoft Exchange allows for remote code execution, potentially leading to system takeover. An attacker can exploit this flaw to execute arbitrary code on the Exchange server.
Risk Assessment
Organizations may face serious threats, including data loss and unauthorized access to systems. Exploitation of this vulnerability could lead to significant security consequences.
Recommendation
It is recommended to apply available patches as soon as possible and to monitor systems for unauthorized activity. Regular updates and security audits are crucial.
Other vulnerabilities in Microsoft Exchange
See all- CVE-1999-0993High
Modifications to Access Control Lists (ACLs) in Microsoft Exchange 5.5 do not take effect until the directory store cache is refreshed.
- CVE-1999-0682Medium
Microsoft Exchange 5.5 allows a remote attacker to relay email (i.e. spam) using encapsulated SMTP addresses, even if the anti-relaying features are enabled.
Original NVD description (English source)
Microsoft Exchange Remote Code Execution Vulnerability