KEV Entry

CVE-2022-41080

Known Exploited Vulnerability Entry External Catalog

Entry Details
Confirmed Exploited

CVE-2022-41080

2023-01-10 00:00 UTC


Timestamps

2023-01-10

2023-01-10


Scope

KEVIntel entry: Microsoft Exchange Server Elevation of Privilege Vulnerability | Affected: Microsoft / Microsoft Exchange Server 2016 Cumulative Update 23, Microsoft Exchange Server 2019 Cumulative Update 12, Microsoft Exchange Server 2013 Cumulative Update 23, Microsoft Exchange Server 2019 Cumulative Update 11, Microsoft Exchange Server 2016 Cumulative Update 22 | CVSS: 8.8 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


References
  • {'id': 'CVE-2022-41080', 'url': 'https://www.cve.org/CVERecord?id=CVE-2022-41080'}
  • {'id': 'kevintel', 'url': 'https://kevintel.com/vuln/CVE-2022-41080'}

c8441aa2-3e9c-4b01-a953-c8e8665ab32e

caeb2787-0d58-4236-9039-7c86c3e566f3

2026-06-19 12:47 UTC

2026-06-19 12:47 UTC

Evidence
1
Type Source Signal Confidence Details GCVE Metadata
public_report kevintel confirmed_compromise 0.70
View details
{
  "added_date": "2023-01-10T00:00:00.000Z",
  "ahead_of_cisa_kev": null,
  "cvss_score": 8.8,
  "cvss_severity": "HIGH",
  "epss_percentile": null,
  "epss_score": null,
  "feed": "KEVIntel (kevintel.com)",
  "not_yet_in_cisa_kev": false,
  "product": "Microsoft Exchange Server 2016 Cumulative Update 23, Microsoft Exchange Server 2019 Cumulative Update 12, Microsoft Exchange Server 2013 Cumulative Update 23, Microsoft Exchange Server 2019 Cumulative Update 11, Microsoft Exchange Server 2016 Cumulative Update 22",
  "title": "Microsoft Exchange Server Elevation of Privilege Vulnerability",
  "used_in_malware": "yes",
  "vendor": "Microsoft"
}
-