Search Results | AttackerKB

Show filters

Topics 678 Users 0

Clear All

Disclosure Date

Disclosure Year Disclosure Month

Collection Command and Control Credential Access Defense Evasion Discovery Execution Exfiltration Impact Initial Access Lateral Movement Persistence Privilege Escalation

678 Total Results

Displaying 11-20 of 678

Attacker Value

High

CVE-2023-21707

Disclosure Date: February 14, 2023 (last updated October 08, 2023)

Microsoft Exchange Server Remote Code Execution Vulnerability

Attack Vector: Network Privileges: Low User Interaction: None

3

Attacker Value

Moderate

CVE-2023-36745

Disclosure Date: September 12, 2023 (last updated December 14, 2023)

Microsoft Exchange Server Remote Code Execution Vulnerability

Attack Vector: Adjacent Network Privileges: Low User Interaction: None

3

Attacker Value

High

CVE-2021-28482

Disclosure Date: April 13, 2021 (last updated December 29, 2023)

Microsoft Exchange Server Remote Code Execution Vulnerability

Attack Vector: Network Privileges: Low User Interaction: None

4

Attacker Value

High

CVE-2021-33766 ProxyToken

Disclosure Date: July 14, 2021 (last updated December 29, 2023)

Microsoft Exchange Server Information Disclosure Vulnerability

Attack Vector: Network Privileges: None User Interaction: None

4

Attacker Value

Very High

CVE-2023-23397

Disclosure Date: March 14, 2023 (last updated October 08, 2023)

Microsoft Outlook Elevation of Privilege Vulnerability

Attack Vector: Network Privileges: None User Interaction: None

16

Attacker Value

Unknown

CVE-2024-21410

Disclosure Date: February 13, 2024 (last updated February 27, 2024)

Microsoft Exchange Server Elevation of Privilege Vulnerability

Attack Vector: Network Privileges: None User Interaction: None

5

Attacker Value

Unknown

CVE-2022-34721

Disclosure Date: September 13, 2022 (last updated December 20, 2023)

Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability

Attack Vector: Network Privileges: None User Interaction: None

3

Attacker Value

Very High

CVE-2021-21985

Disclosure Date: May 26, 2021 (last updated June 29, 2021)

The vSphere Client (HTML5) contains a remote code execution vulnerability due to lack of input validation in the Virtual SAN Health Check plug-in which is enabled by default in vCenter Server. A malicious actor with network access to port 443 may exploit this issue to execute commands with unrestricted privileges on the underlying operating system that hosts vCenter Server.

Attack Vector: Network Privileges: None User Interaction: None

17

Attacker Value

Very High

CVE-2021-27065

Disclosure Date: March 03, 2021 (last updated December 30, 2023)

Microsoft Exchange Server Remote Code Execution Vulnerability

Attack Vector: Local Privileges: None User Interaction: Required

1

Attacker Value

Very High

CVE-2022-41082

Disclosure Date: October 03, 2022 (last updated December 21, 2023)

Microsoft Exchange Server Remote Code Execution Vulnerability

Attack Vector: Adjacent Network Privileges: Low User Interaction: None

2