{"id":"CVE-2020-0688","aliases":["EUVD-2020-2181","GHSA-4g56-8mc7-hpjq"],"status":"published","title":"A remote code execution vulnerability exists in Microsoft Exchange software when the software...","description":"A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka 'Microsoft Exchange Memory Corruption Vulnerability'.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.99955,"percentile":0.99974,"model":"v2026.06.15"},"facts":{"in_kev":true,"known_exploited":true,"public_exploit":true,"fix_available":false},"cwes":["CWE-287","CWE-502","CWE-798"],"published":"2020-02-11T21:22:59Z","modified":"2026-06-17T02:46:21Z","kev":{"date_added":"2021-11-03","due_date":"2022-05-03","required_action":"Apply updates per vendor instructions.","known_ransomware_use":"Known"},"exploitation":[{"source":"euvd","since":"2021-11-03"},{"source":"kev","since":"2021-11-03"}],"exploits":[{"source":"metasploit","id":"exploit/windows/http/exchange_ecp_viewstate","title":"Exchange Control Panel ViewState Deserialization","type":"exploit","platform":"Windows","date":"2020-02-11","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/windows/http/exchange_ecp_viewstate"},{"source":"pocgithub","id":"random-robbie/cve-2020-0688","title":"random-robbie/cve-2020-0688","date":"2020-02-25","url":"https://github.com/random-robbie/cve-2020-0688"},{"source":"pocgithub","id":"Jumbo-WJB/CVE-2020-0688","title":"Jumbo-WJB/CVE-2020-0688","date":"2020-02-26","url":"https://github.com/Jumbo-WJB/CVE-2020-0688"},{"source":"pocgithub","id":"Ridter/cve-2020-0688","title":"Ridter/cve-2020-0688","date":"2020-02-27","url":"https://github.com/Ridter/cve-2020-0688"},{"source":"pocgithub","id":"Yt1g3r/CVE-2020-0688_EXP","title":"Yt1g3r/CVE-2020-0688_EXP","date":"2020-02-27","url":"https://github.com/Yt1g3r/CVE-2020-0688_EXP"},{"source":"pocgithub","id":"onSec-fr/CVE-2020-0688-Scanner","title":"onSec-fr/CVE-2020-0688-Scanner","date":"2020-02-28","url":"https://github.com/onSec-fr/CVE-2020-0688-Scanner"},{"source":"pocgithub","id":"truongtn/cve-2020-0688","title":"truongtn/cve-2020-0688","date":"2020-02-28","url":"https://github.com/truongtn/cve-2020-0688"},{"source":"pocgithub","id":"youncyb/CVE-2020-0688","title":"youncyb/CVE-2020-0688","date":"2020-02-28","url":"https://github.com/youncyb/CVE-2020-0688"},{"source":"pocgithub","id":"zcgonvh/CVE-2020-0688","title":"zcgonvh/CVE-2020-0688","date":"2020-03-01","url":"https://github.com/zcgonvh/CVE-2020-0688"},{"source":"exploitdb","id":"EDB-48153","title":"Microsoft Exchange 2019 15.2.221.12 - Authenticated Remote Code Execution","type":"remote","platform":"windows","date":"2020-03-02","url":"https://www.exploit-db.com/exploits/48153"},{"source":"pocgithub","id":"justin-p/PSForgot2kEyXCHANGE","title":"justin-p/PSForgot2kEyXCHANGE","date":"2020-03-04","url":"https://github.com/justin-p/PSForgot2kEyXCHANGE"},{"source":"exploitdb","id":"EDB-48168","title":"Exchange Control Panel - Viewstate Deserialization (Metasploit)","type":"remote","platform":"windows","date":"2020-03-05","verified":true,"url":"https://www.exploit-db.com/exploits/48168"},{"source":"pocgithub","id":"bailongwang1/CVE-2020-0688","title":"bailongwang1/CVE-2020-0688","date":"2020-03-09","url":"https://github.com/bailongwang1/CVE-2020-0688"},{"source":"pocgithub","id":"cert-lv/CVE-2020-0688","title":"cert-lv/CVE-2020-0688","date":"2020-03-19","url":"https://github.com/cert-lv/CVE-2020-0688"},{"source":"pocgithub","id":"ravinacademy/CVE-2020-0688","title":"ravinacademy/CVE-2020-0688","date":"2020-03-31","url":"https://github.com/ravinacademy/CVE-2020-0688"},{"source":"pocgithub","id":"mahyarx/Exploit_CVE-2020-0688","title":"mahyarx/Exploit_CVE-2020-0688","date":"2020-04-05","url":"https://github.com/mahyarx/Exploit_CVE-2020-0688"},{"source":"pocgithub","id":"ktpdpro/CVE-2020-0688","title":"ktpdpro/CVE-2020-0688","date":"2020-04-22","url":"https://github.com/ktpdpro/CVE-2020-0688"},{"source":"pocgithub","id":"w4fz5uck5/cve-2020-0688-webshell-upload-technique","title":"w4fz5uck5/cve-2020-0688-webshell-upload-technique","date":"2020-06-12","url":"https://github.com/w4fz5uck5/cve-2020-0688-webshell-upload-technique"},{"source":"pocgithub","id":"murataydemir/CVE-2020-0688","title":"murataydemir/CVE-2020-0688","date":"2020-08-17","url":"https://github.com/murataydemir/CVE-2020-0688"},{"source":"pocgithub","id":"zyn3rgy/ecp_slap","title":"zyn3rgy/ecp_slap","date":"2020-10-23","url":"https://github.com/zyn3rgy/ecp_slap"},{"source":"pocgithub","id":"SLSteff/CVE-2020-0688-Scanner","title":"SLSteff/CVE-2020-0688-Scanner","date":"2020-10-29","url":"https://github.com/SLSteff/CVE-2020-0688-Scanner"},{"source":"pocgithub","id":"MrTiz/CVE-2020-0688","title":"MrTiz/CVE-2020-0688","date":"2021-01-04","url":"https://github.com/MrTiz/CVE-2020-0688"},{"source":"pocgithub","id":"7heKnight/CVE-2020-0688","title":"7heKnight/CVE-2020-0688","date":"2022-05-12","url":"https://github.com/7heKnight/CVE-2020-0688"},{"source":"pocgithub","id":"1337-llama/CVE-2020-0688-Python3","title":"1337-llama/CVE-2020-0688-Python3","date":"2022-10-19","url":"https://github.com/1337-llama/CVE-2020-0688-Python3"},{"source":"pocgithub","id":"chudamax/CVE-2020-0688-Exchange2010","title":"chudamax/CVE-2020-0688-Exchange2010","date":"2023-08-02","url":"https://github.com/chudamax/CVE-2020-0688-Exchange2010"},{"source":"pocgithub","id":"W01fh4cker/CVE-2020-0688-GUI","title":"W01fh4cker/CVE-2020-0688-GUI","date":"2024-05-09","url":"https://github.com/W01fh4cker/CVE-2020-0688-GUI"},{"source":"pocgithub","id":"tvdat20004/CVE-2020-0688","title":"tvdat20004/CVE-2020-0688","date":"2025-08-04","url":"https://github.com/tvdat20004/CVE-2020-0688"},{"source":"pocgithub","id":"iamwajd/Cyber-Attack-Analysis","title":"iamwajd/Cyber-Attack-Analysis","date":"2026-02-18","url":"https://github.com/iamwajd/Cyber-Attack-Analysis"}],"products":[{"vendor":"microsoft","product":"exchange server"},{"vendor":"microsoft","product":"exchange_server"},{"vendor":"microsoft","product":"microsoft exchange server 2010 service pack 3 update rollup 30"},{"vendor":"microsoft","product":"microsoft exchange server 2013"},{"vendor":"microsoft","product":"microsoft exchange server 2016 cumulative update 14"},{"vendor":"microsoft","product":"microsoft exchange server 2016 cumulative update 15"},{"vendor":"microsoft","product":"microsoft exchange server 2019 cumulative update 3"},{"vendor":"microsoft","product":"microsoft exchange server 2019 cumulative update 4"}],"references":[{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0688","tags":["x_refsource_MISC","x_transferred","Patch","Vendor Advisory"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-20-258/","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://packetstormsecurity.com/files/156592/Microsoft-Exchange-2019-15.2.221.12-Remote-Code-Execution.html","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://packetstormsecurity.com/files/156620/Exchange-Control-Panel-Viewstate-Deserialization.html","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-0688","tags":["government-resource","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-0688"},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-20-258"},{"url":"https://github.com/advisories/GHSA-4g56-8mc7-hpjq"}],"sources":{"cve":[{"id":"CVE-2020-0688","description":"A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka 'Microsoft Exchange Memory Corruption Vulnerability'.","status":"published","published":"2020-02-11T21:22:59Z","modified":"2025-10-21T23:35:51.234Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T14:36:00.280422Z"}],"euvd":[{"id":"EUVD-2020-2181","description":"A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka 'Microsoft Exchange Memory Corruption Vulnerability'.","status":"published","published":"2020-02-11T21:22:59Z","modified":"2025-10-21T23:35:51Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"exploited_since":"2021-11-03","updated_at":"2026-11-02T20:31:24.816637Z"}],"ghsa":[{"id":"GHSA-4g56-8mc7-hpjq","title":"A remote code execution vulnerability exists in Microsoft Exchange software when the software...","description":"A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka 'Microsoft Exchange Memory Corruption Vulnerability'.","status":"published","published":"2022-05-24T17:08:27Z","modified":"2026-03-18T05:04:37Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-287","CWE-502","CWE-798"],"updated_at":"2026-11-02T15:06:41.030615Z"}],"kev":[{"id":"CVE-2020-0688","title":"Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability","description":"Microsoft Exchange Server Validation Key fails to properly create unique keys at install time, allowing for remote code execution.","cwes":["CWE-287"],"kev":{"date_added":"2021-11-03","due_date":"2022-05-03","required_action":"Apply updates per vendor instructions.","known_ransomware_use":"Known"},"updated_at":"2026-11-02T17:00:17.050017Z"}],"nvd":[{"id":"CVE-2020-0688","description":"A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka 'Microsoft Exchange Memory Corruption Vulnerability'.","status":"published","published":"2020-02-11T22:15:15.9Z","modified":"2026-06-17T02:46:21.387Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"2.0","score":9,"vector":"AV:N/AC:L/Au:S/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T14:05:53.837808Z"}]}}