Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
CVE coverage

CVE-2022-41040

CVSS 8.8 Actively exploited (KEV) 5 detections found
View on NVD →
Microsoft Exchange Server Elevation of Privilege Vulnerability

Detection rules

Source Rule Status Updated
splunk Windows Exchange Autodiscover SSRF Abuse production 2026-05-13
sigma Suspicious File Drop by Exchange test 2022-10-04
sigma Suspicious ASPX File Drop by Exchange test 2022-10-01
sigma Chopper Webshell Process Pattern test 2022-10-01
sentinel Exchange Worker Process Making Remote Call Scheduled —