CVE-2020-17144
Microsoft Exchange Server Remote Code Execution Vulnerability
Published Dec 9, 2020 · updated Jun 16, 2026 · microsoft exchange server
Microsoft Exchange Server improperly validates cmdlet arguments which allow an attacker to perform remote code execution.
Timeline
Detection, updates, and resolution for this record.
Dec 9, 2020 · Catalog
Detected
Microsoft Exchange Server improperly validates cmdlet arguments which allow an attacker to perform remote code execution.
Nov 3, 2021 · CISA KEV
Known exploited
Apply updates per vendor instructions.
May 3, 2022 · CISA KEV
Remediation due
Apply updates per vendor instructions.
Jun 16, 2026 · Catalog
Updated
Microsoft Exchange Server improperly validates cmdlet arguments which allow an attacker to perform remote code execution.
Required action
Apply updates per vendor instructions.
CISA due date May 3, 2022
Affected
- cpe microsoft/exchange server2010
- vendor Microsoft Exchange Serverversion unspecified
Sources
- CISA KEVCVE-2020-17144
Microsoft Exchange Server improperly validates cmdlet arguments which allow an attacker to perform remote code execution.
cisa.gov - CVE.orgCVE-2020-17144
Official CVE identifier
cve.org - FIRST EPSSCVE-2020-17144
30-day exploitation probability 36.5%
first.org - NIST NVDCVE-2020-17144
Microsoft Exchange Remote Code Execution Vulnerability
nvd.nist.gov