Vulnerabilitycritical
Discovering Exchange Servers: Leveling the Field Using Attack Surface Intelligence
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2021-26855 | Unauthenticated SSRF/RCE in Microsoft Exchange Server (ProxyLogon) | 9.1 | 100% | KEVRansomwarePoC ×4 | KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | autodiscover.com | en user credentials began randomly reaching domains such as autodiscover[.]com or autodiscover[.]online , a massive credential leak prob |
| domain | autodiscover.online | gan randomly reaching domains such as autodiscover[.]com or autodiscover[.]online , a massive credential leak problem ensued. As a result, |
From the original article
6 min read at recordedfuture.com
Microsoft Exchange , the foundational server technology behind the world’s most popular enterprise email and scheduling ecosystem, has recently turned twenty-six. Over the years, the term “Exchange” has become synonymous with aspects of both work and personal life, like office integration or simplified calendar sharing; in short, a household name for all things productivity.
By German Hoeffner & Gianni Perez · recordedfuture.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.