Vulnerabilitycritical
March 2021 Patch Tuesday forecast: Off to an early start
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2021-26855+3 related CVEs | Unauthenticated SSRF/RCE in Microsoft Exchange Server (ProxyLogon) | 9.1 group max | 100% | KEVRansomwarePoC ×4 | KEV |
From the original article
3 min read at helpnetsecurity.com
Microsoft got an early start on Patch Tuesday, releasing a series of out-of-band security updates this week to address four zero-day vulnerabilities in Exchange Server . There’s been a lot of security activity in the news, so I’m sure it is going to be a busy Patch Tuesday. The Microsoft Security Response Center reported known attacks against Exchange Server by the hacking group Hafnium.
By @helpnetsecurity · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.