CVE-2020-17084

—

CVSS 3.1

8.5 high

EPSS

4%p90

Published

Nov 11, 2020 (Nov 11, 2020)

Modified

Jun 17, 2026

Description

Microsoft Exchange Server Remote Code Execution Vulnerability

Vendors: microsoft
Products: exchange server
Weakness: CWE-120
Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (3.9%)

In the news2 stories

November 2020 Patch Tuesday: Microsoft fixes actively exploited Windows Kernel flaw

Help Net SecurityJun 8, 18:29 UTC · Jun 8, 2021Vulnerability in the wildCVE-2020-17087 CVE-2020-17051 CVE-2020-17040+2 CVEs

60

Microsoft Releases Windows Security Updates For Critical Flaws

The Hacker NewsNov 11, 10:29 UTC · Nov 11, 2020Vulnerability in the wildCVE-2020-17087 CVE-2020-15999 CVE-2020-17084+5 CVEs

60