CVE-2018-0941

—

CVSS 3.0

5.5 medium

EPSS

12%p96

Published

Mar 14, 2018 (Mar 14, 2018)

Modified

Jun 17, 2026

Description

Microsoft Exchange Server 2016 Cumulative Update 7 and Microsoft Exchange Server 2016 Cumulative Update 8 allow an information disclosure vulnerability due to how data is imported, aka "Microsoft Exchange Information Disclosure Vulnerability". This CVE is unique from CVE-2018-0924.

Vendors: microsoft
Products: exchange server
Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (12.5%)

In the news1 stories

Microsoft Patch Tuesday

Cisco TalosMar 13, 21:38 UTC · Mar 13, 2018Vulnerability CVE-2018-0872 CVE-2018-0874 CVE-2018-0876+70 CVEs