KEV Entry

CVE-2020-0688

Known Exploited Vulnerability Entry Previdian

Back to Catalog View Vulnerability
Entry Details
Confirmed Exploited

CVE-2020-0688

2021-11-03 01:00 CET

Timestamps

2021-11-03

2021-11-03

Scope

A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka... | Affected: Microsoft / Microsoft Exchange Server 2013, Microsoft Exchange Server 2019 Cumulative Update 3, Microsoft Exchange Server 2016 Cumulative Update 14, Microsoft Exchange Server 2016 Cumulative Update 15, Microsoft Exchange Server 2019 Cumulative Update 4, Microsoft Exchange Server 2010 Service Pack 3 Update Rollup 30 | CVSS: 8.8 (HIGH) | EPSS: 0.99962 | Used in malware: yes | Not yet in CISA KEV: False

References
  • {'id': 'CVE-2020-0688', 'url': 'https://www.cve.org/CVERecord?id=CVE-2020-0688'}
  • {'id': 'GHSA-4G56-8MC7-HPJQ', 'url': 'https://github.com/advisories/GHSA-4G56-8MC7-HPJQ'}
  • {'id': 'previdian', 'url': 'https://previdian.com/CVE-2020-0688'}

2bd2b588-10b2-4daa-9940-472c905d4922

Previdian
caeb2787-0d58-4236-9039-7c86c3e566f3

2026-10-02 09:10 CEST

2026-10-02 09:10 CEST

Evidence
1
Type Source Signal Confidence Details GCVE Metadata
public_report previdian confirmed_compromise 0.70
View details 
{
  "added_date": "2021-11-03T00:00:00.000Z",
  "ahead_of_cisa_kev": null,
  "cve_id": "CVE-2020-0688",
  "cvss_estimated": false,
  "cvss_score": 8.8,
  "cvss_severity": "HIGH",
  "epss_percentile": 0.99975,
  "epss_score": 0.99962,
  "feed": "Previdian (previdian.com)",
  "ghsa_id": "GHSA-4G56-8MC7-HPJQ",
  "not_yet_in_cisa_kev": false,
  "previous_ids": [],
  "product": "Microsoft Exchange Server 2013, Microsoft Exchange Server 2019 Cumulative Update 3, Microsoft Exchange Server 2016 Cumulative Update 14, Microsoft Exchange Server 2016 Cumulative Update 15, Microsoft Exchange Server 2019 Cumulative Update 4, Microsoft Exchange Server 2010 Service Pack 3 Update Rollup 30",
  "title": "A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka...",
  "used_in_malware": "yes",
  "vendor": "Microsoft",
  "virtual_patch": false,
  "vulnerability_id": "CVE-2020-0688"
}
 -
Export Options
JSON Object JSON API View Full Catalog