Important CVSS 8.4 EPSS 0.36651 2020-12 archive

Executive Summary

None

Overview

8.4
CVSS HIGH
Important
MS Severity
Not Exploited
MS Exploit Status
More Likely
MS Exploit Likelihood
Category Remote Code Execution
Released Dec 8 2020
Last Updated Dec 8 2020
Publicly Disclosed No
CISA KEV Listed (added 2021-11-03)
Known Exploits None Known
EPSS Score 0.36651 — 0.98298 percentile

CVSS Vector

ATTACK VECTOR
Network
ATTACK COMPLEXITY
Low
PRIVILEGES REQUIRED
High
USER INTERACTION
Required
SCOPE
Changed
Temporal Score: 7.6

EPSS Score

0.36651
probability of exploitation in the next 30 days
0.98298 percentile - updated 2026-06-20
View on FIRST.org

Affected Products

1 affected product
Product KB Article Severity Impact Restart Required
Microsoft Exchange Server 2010 Service Pack 3 Update Rollup 31 4593467 (Security Update) Important Remote Code Execution Maybe

Patches

1 patch
Article Type Restart
4593467 Security Update Maybe

Known Exploits

Acknowledgments

zcgonvh from A-TEAM of Legendsec at Qi'anxin Group