Disclosure summary
Microsoft Exchange Server contains an unspecified vulnerability that allows for authenticated remote code execution. Dubbed "ProxyNotShell," this vulnerability is chainable with CVE-2022-41040 which allows for the remote code execution.
CISA remediation guidance
Apply updates per vendor instructions.
Original records & references
PUBLISHED 2022-09-30T00:00:00-04:00
MODIFIED 2022-09-30T00:00:00-04:00
INGESTED 2026-10-06T11:42:58-04:00