CVE-2020-17141

🗓️ 09 Dec 2020 23:36:54Reported by microsoftType

cve🔗 web.nvd.nist.gov📰️ 10 Media mentions👁 229 Views🌐 WEB

Microsoft Exchange Remote Code Execution Vulnerability

Reporter	Title	Published	Views	Family All 24
attackerkb	CVE-2020-17132	10 Dec 202000:00	–	attackerkb
Information Security Automation	Vulristics Vulnerability Score, Automated Data Collection and Microsoft Patch Tuesdays Q4 2020	11 Jan 202101:50	–	avleonov
BDU FSTEC	Microsoft Exchange Server Memory Object Execution Code	15 Dec 202000:00	–	bdu_fstec
Circl	CVE-2020-17141	14 Dec 202018:55	–	circl
CNNVD	Microsoft Exchange Server 代码注入漏洞	8 Dec 202000:00	–	cnnvd
CNVD	Microsoft Exchange Server Remote Code Execution Vulnerability (CNVD-2020-73748)	10 Dec 202000:00	–	cnvd
Cvelist	CVE-2020-17141 Microsoft Exchange Remote Code Execution Vulnerability	9 Dec 202023:36	–	cvelist
Microsoft KB	Description of the security update for Microsoft Exchange Server 2019 and 2016: December 8, 2020	8 Dec 202008:00	–	mskb
Kaspersky	KLA12022 Multiple vulnerabilities in Microsoft Server Software	8 Dec 202000:00	–	kaspersky
Microsoft CVE	Microsoft Exchange Remote Code Execution Vulnerability	8 Dec 202008:00	–	mscve

NVD

Vulners

CNA

Node

microsoft exchange_serverMatch2016cumulative_update_17

microsoft exchange_serverMatch2016cumulative_update_18

microsoft exchange_serverMatch2019cumulative_update_6

microsoft exchange_serverMatch2019cumulative_update_7

[
  {
    "vendor": "Microsoft",
    "product": "Microsoft Exchange Server 2016 Cumulative Update 17",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "15.01.0",
        "lessThan": "publication",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft Exchange Server 2016 Cumulative Update 18",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "15.01.0",
        "lessThan": "publication",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft Exchange Server 2019 Cumulative Update 6",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "15.02.0",
        "lessThan": "publication",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft Exchange Server 2019 Cumulative Update 7",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "15.02.0",
        "lessThan": "publication",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  }
]

Source	Link
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17141
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17141

Parameter	Position	Path	Description	CWE
complaintData	request body	/ews/Exchange.asmx	XML External Entity (XXE) vulnerability in RouteComplaint data processing of Exchange Web Services (EWS) Exchange.asmx, leading to information disclosure.	CWE-611

17 Jun 2026 02:58Current

9Critical risk

Vulners AI Score9

CVSS 26

CVSS 3.18.4

EPSS0.06633