KEV · Actively exploited

CVE-2020-0688

CVE-2020-0688 is actively exploited (CISA KEV catalog), rated high by the vendor: 0 tracked apps concerned, none still exposed on their current version.

Severity (CVSS): -
Exploitation: Confirmed
Tracked apps: 0
Still exposed: 0

Vendor bulletin scale : NVD CVSS pending Public exploit : ExploitDB Published on 2020-02-11

Microsoft Exchange Validation Key Remote Code Execution Vulnerability

EPSS 99.97% predictive model; CISA confirms active exploitation percentile 100.0%

CISA Known Exploited Vulnerability

Added to KEV: 2021-11-03
Remediation deadline: 2022-05-03
Required action: Apply updates per vendor instructions.
Ransomware: Yes, known ransomware campaign

View on NVD ↗ CISA KEV catalog ↗