CYBERSECURITYTRACKER
TRACKING6,506 stories in this site build1,309 vulnerability news stories in this site build
Permanent story citation

Microsoft Exchange Servers Still Vulnerable to ProxyShell | Huntress

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 1179

As cited

Copy frozen at (site build).

vulnerabilities

Microsoft Exchange Servers Still Vulnerable to ProxyShell | Huntress

Attackers continue to scan for and exploit Microsoft Exchange servers affected by ProxyShell vulnerabilities, which were patched in early 2021 but remain present on unpatched systems. The ongoing attacks indicate that a significant number of organizations have not applied these critical patches despite the nearly three-year window since the fixes were released.

Why it matters: Organizations running unpatched Exchange servers face immediate risk of compromise and data theft; administrators should verify their Exchange versions are fully patched and monitor for scanning activity targeting these known vulnerabilities.

Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

vulnerabilities

Microsoft Exchange Servers Still Vulnerable to ProxyShell | Huntress

Attackers continue to scan for and exploit Microsoft Exchange servers affected by ProxyShell vulnerabilities, which were patched in early 2021 but remain present on unpatched systems. The ongoing attacks indicate that a significant number of organizations have not applied these critical patches despite the nearly three-year window since the fixes were released.

Why it matters: Organizations running unpatched Exchange servers face immediate risk of compromise and data theft; administrators should verify their Exchange versions are fully patched and monitor for scanning activity targeting these known vulnerabilities.

VendorsMicrosoft
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary