CVE-2020-17132Active Exploitation(microsoft / exchange_server)

LOWCVSS 9.1 · CRITICAL

Exploitation ongoing with high activity in latest observed window (1 mentions)

Immediate actions

Prioritize remediation for microsoft exchange_server systems immediately
Assume compromise if assets are exposed
Track advisory updates for patch or workaround availability

Recommended action window: Immediate (within 24h)

NVD description

Microsoft Exchange Remote Code Execution Vulnerability

microsoft CVEs Back to dashboard

3.5/ 10 priority

Sources & remediation

Patch / fix

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17132

Other references

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17132

Priority

LOW

Exploitation

ACTIVE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

exchange_server

Threat summary

Active exploitation appears in 1 classified signals
1 mentions across 1 observed day

What's happening

Active exploitation reported across 1 signal
1 total mentions across 1 day

Affected systems

Vendors

microsoft

Products

exchange_server

3 versions affected across 1 product

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Active Exploitation

1100.0%

Referenced assets1 URL

By indicator

https://threatcluster.io/cluster/critical-microsoft-exchange-vulnerabilities-exploited-in-the-7eaea81b

Full discourse1 post

ThreatCluster@threatcluster92d
Active Exploitation
CISA said it has added Microsoft Exchange RCE flaws CVE-2020-16875 and CVE-2020-17132 and PAN-OS SAML auth bug CVE-2020-2021 to its Known Exploited Vulnerabilities list after detecting active exploitation. https://threatcluster.io/cluster/critical-microsoft-exchange-vulnerabilities-exploited-in-the-7eaea81b
Post summary
CISA confirms that Microsoft Exchange and PAN-OS vulnerabilities are being actively exploited, adding them to its Known Exploited Vulnerabilities list.
0001068
356 followersView on X

CPE platform detail5 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

5 of 5 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	microsoft	exchange_server	2013	-	-
App	microsoft	exchange_server	2016	-	-
App	microsoft	exchange_server	2016	-	-
App	microsoft	exchange_server	2019	-	-
App	microsoft	exchange_server	2019	-	-

Explore more

Back to dashboard microsoft CVEs exchange_server vulnerabilities