PoC Index

CVE-2018-8581

KEV RANSOMWAREHIGH 7.4EPSS 27.4%

An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka "Microsoft Exchange Server Elevation of Privilege Vulnerability." This affects Microsoft Exchange Server.

CVSS v3.1
7.4 HIGHCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS v3.1
7.4 HIGHCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS v2.0
5.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:N
EPSS
27.36% chance of exploitation in the next 30 days, 98th percentile
CISA KEV
added 2022-03-03, used in ransomware campaigns
Published
2018-11-14
Updated
2025-10-21

Proof-of-concept exploits (2)

References

Related