Dashboard Vulnerabilities Scan

VulnIntel

개인정보처리방침 이용약관 데이터 라이선스

© 2026 VulnIntel. All rights reserved.

CVE-2022-41040 | VulnIntel — VulnIntel

CVE-2022-41040

CVE-2022-41040

HIGH

KEV

Ransomware

Exploit

설명

Microsoft Exchange Server Elevation of Privilege Vulnerability

Score Summary

CVSS Score: 8.8
Version: 3.1
Risk Score: 9.40
Attack Vector: Network
Low Complexity
Low Privileges
No User Interaction
Scope Unchanged
High Confidentiality Impact
High Integrity Impact
High Availability Impact

Details

Published: 10/03/2022(4 years ago)
Modified: 10/30/2025(7 months ago)
Source: KEV, NVD
Products: 1

CISA KEV Listing

Ransomware

Vendor / Project: Microsoft
Product: Exchange Server

Date Added: 09/30/2022
Due Date: 10/21/2022Overdue 1328d

Required Action

Apply updates per vendor instructions.

Vulnerability Lifecycle

CISA KEVKEV Listed09/30/2022
NVDPublished10/03/2022
CISA KEV

CWE Weakness Classification

CWE-918
NVD
Secondary

References (6)

NVD
Patch
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41040
NVD
Exploit
http://packetstormsecurity.com/files/170066/Microsoft-Exchange-ProxyNotShell-Remote-Code-Execution.html
NVD

Affected Products (1)

Microsoft Exchange Server Elevation of Privilege Vulnerability

StatusAnalyzed

Due Date

10/21/2022

NVDLast Modified10/30/2025

Patch

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-41040

NVD

Third Party Advisory

https://www.kb.cert.org/vuls/id/915563

NVD

Third Party Advisory

https://www.secpod.com/blog/microsoft-november-2022-patch-tuesday-patches-65-vulnerabilities-including-6-zero-days/

NVD

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-41040

Vulnerabilities