Vulnerabilitycritical

Microsoft Exchange bugs top list of exploited vulnerabilities affecting financial sector

The RecordFeb 3, 2023 · 00:00 UTC (Feb 3, 2023)2 min read1

Read at therecord.media

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2015-1635 CVE-2021-31206 CVE-2021-34523 CVE-2021-31207 CVE-2021-26855 CVE-2021-26857 CVE-2021-26858 CVE-2021-27065

Tags: cve-2015-1635 cve-2021-31206 cve-2021-34523 cve-2021-31207 cve-2021-26855 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2015-1635	Unauthenticated Remote Code Execution in Microsoft HTTP.sys (MS15-034)	—	100%	KEV	— KEV Feb 10, 2022
CVE-2021-26855 +3 related CVEs CVE-2021-27065 CVE-2021-26857 CVE-2021-26858	Unauthenticated SSRF/RCE in Microsoft Exchange Server (ProxyLogon)	9.1 group max	100%	KEVRansomwarePoC ×4	Mar 3, 2021 KEV Nov 3, 2021
CVE-2021-34523 +1 related CVE CVE-2021-31206	Privilege Escalation in Microsoft Exchange Server (ProxyShell)	9.0 group max	100%	KEVRansomwarePoC	Jul 14, 2021 KEV Nov 3, 2021
CVE-2021-31207	Security feature bypass in Microsoft Exchange Server (ProxyShell) enables webshell RCE	6.6	100%	KEVRansomwarePoC	May 11, 2021 KEV Nov 3, 2021

From the original article

2 min read at therecord.media

Two bugs affecting Microsoft products topped a survey of exploited vulnerabilities being used to target the U. S. financial services sector, according to new research.

The Record

therecord.media

Read the full article at The Record

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.