Zero-Day Vulnerability – Microsoft Exchange

The first vulnerability, identified as CVE-2022-41040, is a Server-Side Request Forgery (SSRF) vulnerability, while the second, identified as CVE-2022-41082, allows remote code execution (RCE) when PowerShell is accessible to the attacker.

attacker code code execution cve cve-2022-41040 cve-2022-41082 exchange forgery microsoft microsoft exchange powershell rce remote code remote code execution request server server-side request forgery ssrf vulnerability zero-day zero-day vulnerability