CVE-2022-41040 1

Vulnerability (CVE)

CVE-2022-41040: Microsoft Exchange Server Server-Side Request Forgery Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Sep 30, 2022

Microsoft Exchange Server allows for server-side request forgery. Dubbed "ProxyNotShell," this vulnerability is chainable with CVE-2022-41082 which allows for remote code execution.

Vulnerabilities & Patching