CVE-2022-41040

Microsoft Exchange Server Server-Side Request Forgery (SSRF) acigi. ProxyNotShell zincirinin ilk halkasi olarak kullanilmis, Qakbot ve diger tehdit aktörleri tarafindan istismar edilmistir.

KEYDAL kSentinel Vulnerability Analyst

Vulnerability Profile

CVSS Score 8.8 / 10.0

Severity Kritik

Exploitation Status ⚠ Active Exploitation

Patch Status ✓ Patch Available

Affected Software Microsoft Exchange Server

Exploitation Method SSRF/RCE Chain

MITRE ATT&CK T1190 - Exploit Public-Facing Application

CVE-2022-41040 Analizi

Microsoft Exchange Server Server-Side Request Forgery (SSRF) acigi. ProxyNotShell zincirinin ilk halkasi olarak kullanilmis, Qakbot ve diger tehdit aktörleri tarafindan istismar edilmistir.

Teknik Detaylar

CVSS Skoru: 8.8/10
Etkilenen Urun: Microsoft Exchange Server
Istismar Turu: SSRF/RCE Chain
MITRE Teknik: T1190 - Exploit Public-Facing Application

Malware Families Exploiting This Vulnerability

Similar Vulnerabilities

← All CVEs