Loading CVE intelligence

CVE-2022-41040

HighPublished

Microsoft Exchange Server Elevation of Privilege Vulnerability

Published: Oct 3, 2022
Updated: Oct 21, 2025
Assigning CNA: microsoft
Evidence observed: Sep 30, 2022

Primary CVSS

8.8/ 10High

nvd · CVSS 3.1

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS probability estimate

100.0%

High · next 30 days

Percentile: 100.0%
Model date: Sep 21, 2026

EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.

CISA Known Exploited

This CVE appears in the CISA Known Exploited Vulnerabilities catalog.

Summary

Microsoft Exchange Server Elevation of Privilege Vulnerability

Sources

10

CVE-2022-41040_MitigationPatch
PowerShell script to mitigate CVE-2022-41040 on affected Exchange servers by applying recommended configuration changes.
CVE-2022-41040Exploit
SSRF exploit payloads and reconnaissance dorks for CVE-2022-41040 targeting Microsoft Exchange Autodiscover endpoint with Burp Collaborator integration.
CVE-2022-41040-POCPoC
CVE-2022-41040 - Server Side Request Forgery (SSRF) in Microsoft Exchange Server
CVE-2022-41040-metasploit-ProxyNotShell

Responsible use

Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.

PoC

the metasploit script(POC) about CVE-2022-41040. Microsoft Exchange are vulnerable to a server-side request forgery (SSRF) attack. An authenticated attacker can use the vulnerability to elevate privileges.

ProxyNotShell-PoCPoC

Exploits Microsoft Exchange ProxyNotShell vulnerabilities (CVE-2022-41040 and CVE-2022-41082) with an authenticated PoC script that executes commands on vulnerable servers.

CVE-2022-41040PoC

Focused repository for CVE-2022-41040, providing vulnerability-specific code and technical material for security testing, research, and analysis.

CVE-2022-41040Scanner

Python-based scanner for CVE-2022-41040 that tests single or multiple URLs for the vulnerability, with simple CLI interface and dependency on requests and colorama.

CVE-2022-41040Exploit

CVE-2022-41040 nuclei template

CVE-2022-41040Patch

mitigation script for MS Exchange server vuln

LetsDefend-CVE-2022-41082-Exploitation-AttemptResearch

Detailed incident report and educational analysis of CVE-2022-41082 (ProxyNotShell) exploitation attempt on Microsoft Exchange Server, including detection methods, IoCs, and mitigation steps.