Microsoft Exchange Server October 2022 Zero-day Vulnerabilities (ProxyNotShell)

high Nessus Plugin ID 165705

Version 1.11

Dec 26, 2023, 2:33 PM

  • CVSSv2 score source (changed from "CVE-2022-41082" to "CVE-2022-41040")

Plugin Feed: 202312261433

Version 1.10

Jan 12, 2023, 11:00 PM

  • IAVM reference

Plugin Feed: 202301122300

Version 1.9

Jan 12, 2023, 6:19 PM

  • Exploit attributes ("Exploit framework core" set to "True")

Plugin Feed: 202301121819

Version 1.8

Dec 5, 2022, 10:02 PM

  • Reference

Plugin Feed: 202212052202

Version 1.7

Dec 2, 2022, 4:16 PM

  • CVSS metrics ("CVSSv2 score" changed from "8.5" to "9.0")
  • CVSS metrics ("CVSSv2 vector" changed from "CVSS2#AV:N/AC:M/Au:S/C:C/I:C/A:C" to "CVSS2#AV:N/AC:L/Au:S/C:C/I:C/A:C")
  • Exploit attributes ("Exploit framework metasploit" set to "True")

Plugin Feed: 202212021616

Version 1.6

Nov 30, 2022, 4:19 PM

  • Plugin metadata (updated solution for CU:11)

Plugin Feed: 202211301619

Version 1.5

Nov 11, 2022, 3:54 PM

  • IAVM reference
  • STIG Severity

Plugin Feed: 202211111554

Version 1.3

Oct 6, 2022, 5:51 PM

  • CISA reference

Plugin Feed: 202210061751

Version 1.2

Oct 6, 2022, 3:53 PM

  • CVSS temporal metrics
  • Exploit attributes

Plugin Feed: 202210061553

* Changelogs are generally available for changes made after Nov 1, 2022