CVE coverage
View on NVD →
CVE-2022-41082
CVSS 8.0
Actively exploited (KEV)
9 detections found
Microsoft Exchange Server Remote Code Execution Vulnerability
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| splunk | Windows Exchange Autodiscover SSRF Abuse | production | 2026-05-13 |
| sigma | OWASSRF Exploitation Attempt Using Public POC - Webserver | test | 2023-01-02 |
| sigma | Potential OWASSRF Exploitation Attempt - Webserver | test | 2023-01-02 |
| sigma | Potential OWASSRF Exploitation Attempt - Proxy | test | 2022-12-22 |
| sigma | OWASSRF Exploitation Attempt Using Public POC - Proxy | test | 2022-12-22 |
| sigma | Suspicious File Drop by Exchange | test | 2022-10-04 |
| sigma | Suspicious ASPX File Drop by Exchange | test | 2022-10-01 |
| sigma | Chopper Webshell Process Pattern | test | 2022-10-01 |
| sentinel | Exchange Worker Process Making Remote Call | Scheduled | — |