9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.101 Low
EPSS
Percentile
94.8%
05/08/2018
Critical
Multiple serious vulnerabilities have been found in Microsoft Exchange Server. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information and spoof user interface.
Microsoft Exchange Server 2010 Service Pack 3 Update Rollup 21
Microsoft Exchange Server 2013 Cumulative Update 19
Microsoft Exchange Server 2013 Cumulative Update 20
Microsoft Exchange Server 2013 Service Pack 1
Microsoft Exchange Server 2016 Cumulative Update 8
Microsoft Exchange Server 2016 Cumulative Update 9
Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)
CVE-2018-8152
CVE-2018-8153
CVE-2018-8151
CVE-2018-8154
CVE-2018-8159
ACE
CVE-2018-81525.8High
CVE-2018-81535.8High
CVE-2018-81514.3Warning
CVE-2018-81595.8High
support.microsoft.com/kb/4091243
support.microsoft.com/kb/4092041
support.microsoft.com/kb/4458321
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8151
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8152
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8153
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8159
portal.msrc.microsoft.com/en-us/security-guidance
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8151
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8152
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8153
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8154
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8159
statistics.securelist.com/vulnerability-scan/month
threats.kaspersky.com/en/product/Microsoft-Exchange-Server/
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.101 Low
EPSS
Percentile
94.8%