{"schema":"vulnpedia.research/1","cve":"CVE-2020-0688","references":[{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0688","tags":["x_refsource_MISC","x_transferred","Patch","Vendor Advisory"],"source":"mitre","sourceId":"microsoft","modified":"2020-03-04T15:06:05.000Z","origins":[{"source":"mitre","sourceId":"microsoft","modified":"2020-03-04T15:06:05.000Z","url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0688"},{"source":"mitre","sourceId":"CVE","modified":"2024-08-04T06:11:05.469Z","url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0688"},{"source":"nvd","sourceId":"CVE-2020-0688","modified":"2026-06-17T02:46:21.387","url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0688"}]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-20-258/","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","VDB Entry"],"source":"mitre","sourceId":"microsoft","modified":"2020-03-04T15:06:05.000Z","origins":[{"source":"mitre","sourceId":"microsoft","modified":"2020-03-04T15:06:05.000Z","url":"https://www.zerodayinitiative.com/advisories/ZDI-20-258/"},{"source":"mitre","sourceId":"CVE","modified":"2024-08-04T06:11:05.469Z","url":"https://www.zerodayinitiative.com/advisories/ZDI-20-258/"},{"source":"nvd","sourceId":"CVE-2020-0688","modified":"2026-06-17T02:46:21.387","url":"https://www.zerodayinitiative.com/advisories/ZDI-20-258/"}]},{"url":"http://packetstormsecurity.com/files/156592/Microsoft-Exchange-2019-15.2.221.12-Remote-Code-Execution.html","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","VDB Entry"],"source":"mitre","sourceId":"microsoft","modified":"2020-03-04T15:06:05.000Z","origins":[{"source":"mitre","sourceId":"microsoft","modified":"2020-03-04T15:06:05.000Z","url":"http://packetstormsecurity.com/files/156592/Microsoft-Exchange-2019-15.2.221.12-Remote-Code-Execution.html"},{"source":"mitre","sourceId":"CVE","modified":"2024-08-04T06:11:05.469Z","url":"http://packetstormsecurity.com/files/156592/Microsoft-Exchange-2019-15.2.221.12-Remote-Code-Execution.html"},{"source":"nvd","sourceId":"CVE-2020-0688","modified":"2026-06-17T02:46:21.387","url":"http://packetstormsecurity.com/files/156592/Microsoft-Exchange-2019-15.2.221.12-Remote-Code-Execution.html"}]},{"url":"http://packetstormsecurity.com/files/156620/Exchange-Control-Panel-Viewstate-Deserialization.html","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","VDB Entry"],"source":"mitre","sourceId":"microsoft","modified":"2020-03-04T15:06:05.000Z","origins":[{"source":"mitre","sourceId":"microsoft","modified":"2020-03-04T15:06:05.000Z","url":"http://packetstormsecurity.com/files/156620/Exchange-Control-Panel-Viewstate-Deserialization.html"},{"source":"mitre","sourceId":"CVE","modified":"2024-08-04T06:11:05.469Z","url":"http://packetstormsecurity.com/files/156620/Exchange-Control-Panel-Viewstate-Deserialization.html"},{"source":"nvd","sourceId":"CVE-2020-0688","modified":"2026-06-17T02:46:21.387","url":"http://packetstormsecurity.com/files/156620/Exchange-Control-Panel-Viewstate-Deserialization.html"}]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-0688","tags":["government-resource","US Government Resource"],"source":"mitre","sourceId":"CISA-ADP","modified":"2025-10-21T23:35:51.234Z","origins":[{"source":"mitre","sourceId":"CISA-ADP","modified":"2025-10-21T23:35:51.234Z","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-0688"},{"source":"nvd","sourceId":"CVE-2020-0688","modified":"2026-06-17T02:46:21.387","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-0688"}]},{"source":"euvd","sourceId":"EUVD-2020-2181","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-2181","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2020-2181","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-2181"}]},{"url":"https://vulncheck.com/kev","tags":["ADVISORY"],"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","url":"https://vulncheck.com/kev"}]},{"url":"https://cisa.gov/news-events/alerts/2020/03/10/unpatched-microsoft-exchange-servers-vulnerable-cve-2020-0688","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","url":"https://cisa.gov/news-events/alerts/2020/03/10/unpatched-microsoft-exchange-servers-vulnerable-cve-2020-0688"}]},{"url":"https://www.welivesecurity.com/wp-content/uploads/2021/05/eset_threat_report_t12021.pdf","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","url":"https://www.welivesecurity.com/wp-content/uploads/2021/05/eset_threat_report_t12021.pdf"}]},{"url":"https://cisa.gov/news-events/cybersecurity-advisories/aa20-275a","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","url":"https://cisa.gov/news-events/cybersecurity-advisories/aa20-275a"}]},{"url":"https://media.cert.europa.eu/static/MEMO/2020/TLP-WHITE-CERT-EU-THREAT-MEMO-Thanos-ransomware.pdf","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","url":"https://media.cert.europa.eu/static/MEMO/2020/TLP-WHITE-CERT-EU-THREAT-MEMO-Thanos-ransomware.pdf"}]},{"url":"https://media.defense.gov/2020/Oct/20/2002519884/-1/-1/0/CSA_CHINESE_EXPLOIT_VULNERABILITIES_UOO179811.PDF","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","url":"https://media.defense.gov/2020/Oct/20/2002519884/-1/-1/0/CSA_CHINESE_EXPLOIT_VULNERABILITIES_UOO179811.PDF"}]},{"url":"https://us-cert.cisa.gov/ncas/alerts/aa20-275a","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","url":"https://us-cert.cisa.gov/ncas/alerts/aa20-275a"}]},{"url":"https://us-cert.cisa.gov/ncas/alerts/aa20-296a","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","url":"https://us-cert.cisa.gov/ncas/alerts/aa20-296a"}]},{"url":"https://cisa.gov/news-events/cybersecurity-advisories/aa20-258a","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","url":"https://cisa.gov/news-events/cybersecurity-advisories/aa20-258a"}]},{"url":"https://cisa.gov/news-events/cybersecurity-advisories/aa20-296a","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","url":"https://cisa.gov/news-events/cybersecurity-advisories/aa20-296a"}]},{"url":"https://cdn.pathfactory.com/assets/10753/contents/298161/03f15d14-01bb-462b-a8d4-d8c6149f5604.pdf","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","url":"https://cdn.pathfactory.com/assets/10753/contents/298161/03f15d14-01bb-462b-a8d4-d8c6149f5604.pdf"}]},{"url":"https://www.cisa.gov/news-events/cybersecurity-advisories/aa21-209a","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","url":"https://www.cisa.gov/news-events/cybersecurity-advisories/aa21-209a"}]},{"url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}]},{"url":"https://www.sentinelone.com/labs/wading-through-muddy-waters-recent-activity-of-an-iranian-state-sponsored-threat-actor/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","url":"https://www.sentinelone.com/labs/wading-through-muddy-waters-recent-activity-of-an-iranian-state-sponsored-threat-actor/"}]},{"url":"https://threatpost.com/us-military-ties-muddywater-cyberespionage-apt-iran/177633/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","url":"https://threatpost.com/us-military-ties-muddywater-cyberespionage-apt-iran/177633/"}]},{"url":"https://cisa.gov/news-events/cybersecurity-advisories/aa22-047a","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","url":"https://cisa.gov/news-events/cybersecurity-advisories/aa22-047a"}]},{"url":"https://cisa.gov/news-events/cybersecurity-advisories/aa22-055a","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","url":"https://cisa.gov/news-events/cybersecurity-advisories/aa22-055a"}]},{"url":"https://www.cisa.gov/uscert/ncas/alerts/aa22-055a","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","url":"https://www.cisa.gov/uscert/ncas/alerts/aa22-055a"}]},{"url":"https://cisa.gov/news-events/alerts/2022/01/11/understanding-and-mitigating-russian-state-sponsored-cyber-threats-us","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","url":"https://cisa.gov/news-events/alerts/2022/01/11/understanding-and-mitigating-russian-state-sponsored-cyber-threats-us"}]},{"url":"https://cisa.gov/news-events/cybersecurity-advisories/aa22-011a","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","url":"https://cisa.gov/news-events/cybersecurity-advisories/aa22-011a"}]},{"url":"https://www.cisa.gov/uscert/ncas/alerts/aa22-011a","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","url":"https://www.cisa.gov/uscert/ncas/alerts/aa22-011a"}]},{"url":"https://www.tenable.com/blog/contileaks-chats-reveal-over-30-vulnerabilities-used-by-conti-ransomware-affiliates","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","url":"https://www.tenable.com/blog/contileaks-chats-reveal-over-30-vulnerabilities-used-by-conti-ransomware-affiliates"}]},{"url":"https://www.pwc.com/gx/en/issues/cybersecurity/cyber-threat-intelligence/cyber-year-in-retrospect/yir-cyber-threats-annex-download.pdf","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","url":"https://www.pwc.com/gx/en/issues/cybersecurity/cyber-threat-intelligence/cyber-year-in-retrospect/yir-cyber-threats-annex-download.pdf"}]},{"url":"https://cisa.gov/news-events/alerts/2022/04/27/2021-top-routinely-exploited-vulnerabilities","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","url":"https://cisa.gov/news-events/alerts/2022/04/27/2021-top-routinely-exploited-vulnerabilities"}]},{"url":"https://cisa.gov/news-events/cybersecurity-advisories/aa22-117a","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","url":"https://cisa.gov/news-events/cybersecurity-advisories/aa22-117a"}]},{"url":"https://static.tenable.com/marketing/whitepapers/Whitepaper-Ransomware_Ecosystem.pdf","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","url":"https://static.tenable.com/marketing/whitepapers/Whitepaper-Ransomware_Ecosystem.pdf"}]},{"url":"https://www.securin.io/articles/all-about-conti-ransomware/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","url":"https://www.securin.io/articles/all-about-conti-ransomware/"}]},{"url":"https://www.pwc.com/gx/en/issues/cybersecurity/cyber-threat-intelligence/muddy-advanced-persistent-teacher.html","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","url":"https://www.pwc.com/gx/en/issues/cybersecurity/cyber-threat-intelligence/muddy-advanced-persistent-teacher.html"}]},{"url":"https://www.prodaft.com/m/reports/FIN7_TLPCLEAR.pdf","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","url":"https://www.prodaft.com/m/reports/FIN7_TLPCLEAR.pdf"}]},{"url":"https://www.group-ib.com/resources/research-hub/hi-tech-crime-trends-2022/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","url":"https://www.group-ib.com/resources/research-hub/hi-tech-crime-trends-2022/"}]},{"url":"https://www.fortinet.com/blog/threat-research/operation-total-exchange-backdoor-discovered","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","url":"https://www.fortinet.com/blog/threat-research/operation-total-exchange-backdoor-discovered"}]},{"url":"https://www.cert.ssi.gouv.fr/uploads/CERTFR-2023-CTI-009.pdf","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","url":"https://www.cert.ssi.gouv.fr/uploads/CERTFR-2023-CTI-009.pdf"}]},{"url":"https://rt-solar.ru/solar-4rays/blog/4329/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","url":"https://rt-solar.ru/solar-4rays/blog/4329/"}]},{"url":"https://www.f5.com/labs/articles/threat-intelligence/2024-ddos-attack-trends","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","url":"https://www.f5.com/labs/articles/threat-intelligence/2024-ddos-attack-trends"}]},{"url":"https://zeroed.tech/blog/viewstate-the-unpatchable-iis-forever-day-being-actively-exploited/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","url":"https://zeroed.tech/blog/viewstate-the-unpatchable-iis-forever-day-being-actively-exploited/"}]},{"url":"https://www.f5.com/labs/articles/threat-intelligence/sensor-intel-series-top-cves-june-2024","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","url":"https://www.f5.com/labs/articles/threat-intelligence/sensor-intel-series-top-cves-june-2024"}]},{"url":"https://content.kaspersky-labs.com/fm/site-editor/33/3318ec849851138088d24f26d236f469/source/irreport.pdf","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","url":"https://content.kaspersky-labs.com/fm/site-editor/33/3318ec849851138088d24f26d236f469/source/irreport.pdf"}]},{"url":"https://securelist.com/ghostcontainer/116953/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","url":"https://securelist.com/ghostcontainer/116953/"}]},{"url":"https://fortiguard.fortinet.com/threat-signal-report/6276","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","url":"https://fortiguard.fortinet.com/threat-signal-report/6276"}]},{"url":"https://fortiguard.fortinet.com/outbreak-alert/unc1549-espionage-attack","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","url":"https://fortiguard.fortinet.com/outbreak-alert/unc1549-espionage-attack"}]},{"url":"https://cf-assets.www.cloudflare.com/slt3lc6tev37/sWDBUMNVtEJB9ZFLt1dUU/8d69e92de2edfb3bf59e7d21d57e7e1a/Cloudflare-2026-threat-report.pdf","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","url":"https://cf-assets.www.cloudflare.com/slt3lc6tev37/sWDBUMNVtEJB9ZFLt1dUU/8d69e92de2edfb3bf59e7d21d57e7e1a/Cloudflare-2026-threat-report.pdf"}]},{"url":"https://services.google.com/fh/files/misc/cloud_threat_horizons_report_h12026.pdf","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","url":"https://services.google.com/fh/files/misc/cloud_threat_horizons_report_h12026.pdf"}]},{"url":"https://www.tenable.com/blog/cyber-retaliation-analyzing-iranian-cyber-activity-following-operation-epic-fury","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","url":"https://www.tenable.com/blog/cyber-retaliation-analyzing-iranian-cyber-activity-following-operation-epic-fury"}]},{"url":"https://horizon3.ai/wp-content/uploads/2026/03/Iranian_APT_TTP_Report_2026.pdf","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","url":"https://horizon3.ai/wp-content/uploads/2026/03/Iranian_APT_TTP_Report_2026.pdf"}]},{"url":"https://fortiguard.fortinet.com/outbreak-alert/iran-linked-cyber-attacks","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","url":"https://fortiguard.fortinet.com/outbreak-alert/iran-linked-cyber-attacks"}]},{"url":"https://intrusiontruth.wordpress.com/2026/07/28/turns-out-the-ghost-was-the-pla/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","url":"https://intrusiontruth.wordpress.com/2026/07/28/turns-out-the-ghost-was-the-pla/"}]},{"url":"https://vulncheck.com/xdb/6101f68c0b43","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"6101f68c0b43","modified":"2020-03-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"6101f68c0b43","modified":"2020-03-10T00:00:00Z","url":"https://vulncheck.com/xdb/6101f68c0b43"}]},{"url":"https://github.com/zcgonvh/CVE-2020-0688","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"6101f68c0b43","modified":"2020-03-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"6101f68c0b43","modified":"2020-03-10T00:00:00Z","url":"https://github.com/zcgonvh/CVE-2020-0688"}]},{"url":"https://vulncheck.com/xdb/7f793deb1114","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"7f793deb1114","modified":"2020-03-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"7f793deb1114","modified":"2020-03-10T00:00:00Z","url":"https://vulncheck.com/xdb/7f793deb1114"}]},{"url":"https://vulncheck.com/xdb/ed6eb904124b","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"ed6eb904124b","modified":"2020-03-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"ed6eb904124b","modified":"2020-03-10T00:00:00Z","url":"https://vulncheck.com/xdb/ed6eb904124b"}]},{"url":"https://github.com/w4fz5uck5/cve-2020-0688-webshell-upload-technique","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"ed6eb904124b","modified":"2020-03-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"ed6eb904124b","modified":"2020-03-10T00:00:00Z","url":"https://github.com/w4fz5uck5/cve-2020-0688-webshell-upload-technique"}]},{"url":"https://vulncheck.com/xdb/42b75e809382","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"42b75e809382","modified":"2020-03-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"42b75e809382","modified":"2020-03-10T00:00:00Z","url":"https://vulncheck.com/xdb/42b75e809382"}]},{"url":"https://github.com/murataydemir/CVE-2020-0688","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"42b75e809382","modified":"2020-03-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"42b75e809382","modified":"2020-03-10T00:00:00Z","url":"https://github.com/murataydemir/CVE-2020-0688"}]},{"url":"https://vulncheck.com/xdb/8a20e8eac65d","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"8a20e8eac65d","modified":"2020-03-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"8a20e8eac65d","modified":"2020-03-10T00:00:00Z","url":"https://vulncheck.com/xdb/8a20e8eac65d"}]},{"url":"https://vulncheck.com/xdb/ab48dae2440a","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"ab48dae2440a","modified":"2020-03-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"ab48dae2440a","modified":"2020-03-10T00:00:00Z","url":"https://vulncheck.com/xdb/ab48dae2440a"}]},{"url":"https://github.com/Ken-Abruzzi/cve_2020_0688","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"ab48dae2440a","modified":"2020-03-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"ab48dae2440a","modified":"2020-03-10T00:00:00Z","url":"https://github.com/Ken-Abruzzi/cve_2020_0688"}]},{"url":"https://vulncheck.com/xdb/868234a5c9b7","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"868234a5c9b7","modified":"2020-03-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"868234a5c9b7","modified":"2020-03-10T00:00:00Z","url":"https://vulncheck.com/xdb/868234a5c9b7"}]},{"url":"https://github.com/MrTiz/CVE-2020-0688","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"868234a5c9b7","modified":"2020-03-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"868234a5c9b7","modified":"2020-03-10T00:00:00Z","url":"https://github.com/MrTiz/CVE-2020-0688"}]},{"url":"https://vulncheck.com/xdb/05c78c55c273","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"05c78c55c273","modified":"2020-03-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"05c78c55c273","modified":"2020-03-10T00:00:00Z","url":"https://vulncheck.com/xdb/05c78c55c273"}]},{"url":"https://vulncheck.com/xdb/ac5f11e6a30d","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"ac5f11e6a30d","modified":"2020-03-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"ac5f11e6a30d","modified":"2020-03-10T00:00:00Z","url":"https://vulncheck.com/xdb/ac5f11e6a30d"}]},{"url":"https://github.com/1337-llama/CVE-2020-0688-Python3","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"ac5f11e6a30d","modified":"2020-03-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"ac5f11e6a30d","modified":"2020-03-10T00:00:00Z","url":"https://github.com/1337-llama/CVE-2020-0688-Python3"}]},{"url":"https://vulncheck.com/xdb/730fc9157ab0","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"730fc9157ab0","modified":"2020-03-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"730fc9157ab0","modified":"2020-03-10T00:00:00Z","url":"https://vulncheck.com/xdb/730fc9157ab0"}]},{"url":"https://github.com/Ridter/cve-2020-0688","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"730fc9157ab0","modified":"2020-03-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"730fc9157ab0","modified":"2020-03-10T00:00:00Z","url":"https://github.com/Ridter/cve-2020-0688"}]},{"url":"https://vulncheck.com/xdb/96c707bb39f5","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"96c707bb39f5","modified":"2020-03-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"96c707bb39f5","modified":"2020-03-10T00:00:00Z","url":"https://vulncheck.com/xdb/96c707bb39f5"}]},{"url":"https://github.com/chudamax/CVE-2020-0688-Exchange2010","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"96c707bb39f5","modified":"2020-03-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"96c707bb39f5","modified":"2020-03-10T00:00:00Z","url":"https://github.com/chudamax/CVE-2020-0688-Exchange2010"}]},{"url":"https://vulncheck.com/xdb/e502b8576da7","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"e502b8576da7","modified":"2020-03-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"e502b8576da7","modified":"2020-03-10T00:00:00Z","url":"https://vulncheck.com/xdb/e502b8576da7"}]},{"url":"https://github.com/zyn3rgy/ecp_slap","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"e502b8576da7","modified":"2020-03-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"e502b8576da7","modified":"2020-03-10T00:00:00Z","url":"https://github.com/zyn3rgy/ecp_slap"}]},{"url":"https://vulncheck.com/xdb/7937e058bdf2","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"7937e058bdf2","modified":"2020-03-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"7937e058bdf2","modified":"2020-03-10T00:00:00Z","url":"https://vulncheck.com/xdb/7937e058bdf2"}]},{"url":"https://github.com/kaisaryousuf/CVE-2020-0688","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"7937e058bdf2","modified":"2020-03-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"7937e058bdf2","modified":"2020-03-10T00:00:00Z","url":"https://github.com/kaisaryousuf/CVE-2020-0688"}]},{"url":"https://vulncheck.com/xdb/c2dc4dbb6f66","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"c2dc4dbb6f66","modified":"2020-03-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"c2dc4dbb6f66","modified":"2020-03-10T00:00:00Z","url":"https://vulncheck.com/xdb/c2dc4dbb6f66"}]},{"url":"https://github.com/Yt1g3r/CVE-2020-0688_EXP","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"c2dc4dbb6f66","modified":"2020-03-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"c2dc4dbb6f66","modified":"2020-03-10T00:00:00Z","url":"https://github.com/Yt1g3r/CVE-2020-0688_EXP"}]},{"url":"https://vulncheck.com/xdb/f58d70470909","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"f58d70470909","modified":"2020-03-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"f58d70470909","modified":"2020-03-10T00:00:00Z","url":"https://vulncheck.com/xdb/f58d70470909"}]},{"url":"https://github.com/7heKnight/CVE-2020-0688","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"f58d70470909","modified":"2020-03-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"f58d70470909","modified":"2020-03-10T00:00:00Z","url":"https://github.com/7heKnight/CVE-2020-0688"}]},{"url":"https://vulncheck.com/xdb/1fe8a75efd31","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"1fe8a75efd31","modified":"2020-03-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"1fe8a75efd31","modified":"2020-03-10T00:00:00Z","url":"https://vulncheck.com/xdb/1fe8a75efd31"}]},{"url":"https://github.com/W01fh4cker/CVE-2020-0688-GUI","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"1fe8a75efd31","modified":"2020-03-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"1fe8a75efd31","modified":"2020-03-10T00:00:00Z","url":"https://github.com/W01fh4cker/CVE-2020-0688-GUI"}]},{"url":"https://vulncheck.com/xdb/ae5d257ebb54","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"ae5d257ebb54","modified":"2020-03-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"ae5d257ebb54","modified":"2020-03-10T00:00:00Z","url":"https://vulncheck.com/xdb/ae5d257ebb54"}]},{"url":"https://github.com/tvdat20004/CVE-2020-0688","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"ae5d257ebb54","modified":"2020-03-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"ae5d257ebb54","modified":"2020-03-10T00:00:00Z","url":"https://github.com/tvdat20004/CVE-2020-0688"}]}],"packages":[],"pocCandidates":[{"url":"https://github.com/random-robbie/cve-2020-0688","source":"poc-in-github","sourceId":"CVE-2020-0688","description":"cve-2020-0688","modified":"2026-10-05T17:33:27Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2020-0688","url":"https://github.com/random-robbie/cve-2020-0688"},{"source":"poc-in-github","sourceId":"CVE-2020-0688","modified":"2026-10-05T17:33:27Z","url":"https://github.com/random-robbie/cve-2020-0688"}],"tags":[]},{"url":"https://github.com/Jumbo-WJB/CVE-2020-0688","source":"poc-in-github","sourceId":"CVE-2020-0688","description":"CVE-2020-0688 - Exchange","modified":"2025-10-20T09:16:03Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2020-0688","url":"https://github.com/Jumbo-WJB/CVE-2020-0688"},{"source":"poc-in-github","sourceId":"CVE-2020-0688","modified":"2025-10-20T09:16:03Z","url":"https://github.com/Jumbo-WJB/CVE-2020-0688"}],"tags":[]},{"url":"https://github.com/Ridter/cve-2020-0688","source":"poc-in-github","sourceId":"CVE-2020-0688","description":"cve-2020-0688","modified":"2026-09-30T02:42:48Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2020-0688","url":"https://github.com/Ridter/cve-2020-0688"},{"source":"poc-in-github","sourceId":"CVE-2020-0688","modified":"2026-09-30T02:42:48Z","url":"https://github.com/Ridter/cve-2020-0688"}],"tags":[]},{"url":"https://github.com/Yt1g3r/CVE-2020-0688_EXP","source":"poc-in-github","sourceId":"CVE-2020-0688","description":"CVE-2020-0688_EXP Auto trigger payload & encrypt method","modified":"2026-07-29T10:33:52Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2020-0688","url":"https://github.com/Yt1g3r/CVE-2020-0688_EXP"},{"source":"poc-in-github","sourceId":"CVE-2020-0688","modified":"2026-07-29T10:33:52Z","url":"https://github.com/Yt1g3r/CVE-2020-0688_EXP"}],"tags":[]},{"url":"https://github.com/truongtn/cve-2020-0688","source":"poc-in-github","sourceId":"CVE-2020-0688","description":"I made this script for conducting CVE-2020-0688 more rapidly. It helps to improve checking the vuln, reducing hugely steps for that","modified":"2025-01-14T09:31:40Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2020-0688","url":"https://github.com/truongtn/cve-2020-0688"},{"source":"poc-in-github","sourceId":"CVE-2020-0688","modified":"2025-01-14T09:31:40Z","url":"https://github.com/truongtn/cve-2020-0688"}],"tags":[]},{"url":"https://github.com/onSec-fr/CVE-2020-0688-Scanner","source":"poc-in-github","sourceId":"CVE-2020-0688","description":"Quick tool for checking CVE-2020-0688 on multiple hosts with a non-intrusive method.","modified":"2026-09-18T10:56:50Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2020-0688","url":"https://github.com/onSec-fr/CVE-2020-0688-Scanner"},{"source":"poc-in-github","sourceId":"CVE-2020-0688","modified":"2026-09-18T10:56:50Z","url":"https://github.com/onSec-fr/CVE-2020-0688-Scanner"}],"tags":[]},{"url":"https://github.com/youncyb/CVE-2020-0688","source":"poc-in-github","sourceId":"CVE-2020-0688","description":"CVE-2020-0688","modified":"2025-10-07T09:04:48Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2020-0688","url":"https://github.com/youncyb/CVE-2020-0688"},{"source":"poc-in-github","sourceId":"CVE-2020-0688","modified":"2025-10-07T09:04:48Z","url":"https://github.com/youncyb/CVE-2020-0688"}],"tags":[]},{"url":"https://github.com/zcgonvh/CVE-2020-0688","source":"poc-in-github","sourceId":"CVE-2020-0688","description":"Exploit and detect tools for CVE-2020-0688","modified":"2026-10-14T12:38:06Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2020-0688","url":"https://github.com/zcgonvh/CVE-2020-0688"},{"source":"poc-in-github","sourceId":"CVE-2020-0688","modified":"2026-10-14T12:38:06Z","url":"https://github.com/zcgonvh/CVE-2020-0688"}],"tags":[]},{"url":"https://github.com/justin-p/PSForgot2kEyXCHANGE","source":"poc-in-github","sourceId":"CVE-2020-0688","description":"PoC for Forgot2kEyXCHANGE (CVE-2020-0688) written in PowerShell","modified":"2025-11-03T23:02:18Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2020-0688","url":"https://github.com/justin-p/PSForgot2kEyXCHANGE"},{"source":"poc-in-github","sourceId":"CVE-2020-0688","modified":"2025-11-03T23:02:18Z","url":"https://github.com/justin-p/PSForgot2kEyXCHANGE"}],"tags":[]},{"url":"https://github.com/bailongwang1/CVE-2020-0688","source":"poc-in-github","sourceId":"CVE-2020-0688","description":"Exchange Scanner CVE-2020-0688","modified":"2020-03-09T02:23:36Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2020-0688","url":"https://github.com/bailongwang1/CVE-2020-0688"},{"source":"poc-in-github","sourceId":"CVE-2020-0688","modified":"2020-03-09T02:23:36Z","url":"https://github.com/bailongwang1/CVE-2020-0688"}],"tags":[]},{"url":"https://github.com/cert-lv/CVE-2020-0688","source":"poc-in-github","sourceId":"CVE-2020-0688","description":"Vulnerability scanner for CVE-2020-0688","modified":"2026-09-30T12:11:48Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2020-0688","url":"https://github.com/cert-lv/CVE-2020-0688"},{"source":"poc-in-github","sourceId":"CVE-2020-0688","modified":"2026-09-30T12:11:48Z","url":"https://github.com/cert-lv/CVE-2020-0688"}],"tags":[]},{"url":"https://github.com/ravinacademy/CVE-2020-0688","source":"poc-in-github","sourceId":"CVE-2020-0688","description":"Exploitation Script for CVE-2020-0688 \"Microsoft Exchange default MachineKeySection deserialize vulnerability\"","modified":"2024-08-12T19:59:32Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2020-0688","url":"https://github.com/ravinacademy/CVE-2020-0688"},{"source":"poc-in-github","sourceId":"CVE-2020-0688","modified":"2024-08-12T19:59:32Z","url":"https://github.com/ravinacademy/CVE-2020-0688"}],"tags":[]},{"url":"https://github.com/mahyarx/Exploit_CVE-2020-0688","source":"poc-in-github","sourceId":"CVE-2020-0688","description":"CVE-2020-0688 \"Microsoft Exchange default MachineKeySection deserialize vulnerability\" ","modified":"2024-08-12T19:59:45Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2020-0688","url":"https://github.com/mahyarx/Exploit_CVE-2020-0688"},{"source":"poc-in-github","sourceId":"CVE-2020-0688","modified":"2024-08-12T19:59:45Z","url":"https://github.com/mahyarx/Exploit_CVE-2020-0688"}],"tags":[]},{"url":"https://github.com/ktpdpro/CVE-2020-0688","source":"poc-in-github","sourceId":"CVE-2020-0688","description":"PoC RCE Reverse Shell for CVE-2020-0688","modified":"2024-08-12T20:00:34Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2020-0688","url":"https://github.com/ktpdpro/CVE-2020-0688"},{"source":"poc-in-github","sourceId":"CVE-2020-0688","modified":"2024-08-12T20:00:34Z","url":"https://github.com/ktpdpro/CVE-2020-0688"}],"tags":[]},{"url":"https://github.com/w4fz5uck5/cve-2020-0688-webshell-upload-technique","source":"poc-in-github","sourceId":"CVE-2020-0688","description":"cve-2020-0688 UNIVERSAL Python implementation utilizing ASPX webshell for command output","modified":"2026-06-01T09:35:37Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2020-0688","url":"https://github.com/w4fz5uck5/cve-2020-0688-webshell-upload-technique"},{"source":"poc-in-github","sourceId":"CVE-2020-0688","modified":"2026-06-01T09:35:37Z","url":"https://github.com/w4fz5uck5/cve-2020-0688-webshell-upload-technique"}],"tags":[]},{"url":"https://github.com/murataydemir/CVE-2020-0688","source":"poc-in-github","sourceId":"CVE-2020-0688","description":"[CVE-2020-0688] Microsoft Exchange Server Fixed Cryptographic Key Remote Code Execution (RCE)","modified":"2025-10-07T09:05:37Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2020-0688","url":"https://github.com/murataydemir/CVE-2020-0688"},{"source":"poc-in-github","sourceId":"CVE-2020-0688","modified":"2025-10-07T09:05:37Z","url":"https://github.com/murataydemir/CVE-2020-0688"}],"tags":[]},{"url":"https://github.com/zyn3rgy/ecp_slap","source":"poc-in-github","sourceId":"CVE-2020-0688","description":"CVE-2020-0688 PoC","modified":"2025-04-10T23:54:12Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2020-0688","url":"https://github.com/zyn3rgy/ecp_slap"},{"source":"poc-in-github","sourceId":"CVE-2020-0688","modified":"2025-04-10T23:54:12Z","url":"https://github.com/zyn3rgy/ecp_slap"}],"tags":[]},{"url":"https://github.com/SLSteff/CVE-2020-0688-Scanner","source":"poc-in-github","sourceId":"CVE-2020-0688","description":"Scans for Microsoft Exchange Versions with masscan","modified":"2021-03-20T06:54:20Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2020-0688","url":"https://github.com/SLSteff/CVE-2020-0688-Scanner"},{"source":"poc-in-github","sourceId":"CVE-2020-0688","modified":"2021-03-20T06:54:20Z","url":"https://github.com/SLSteff/CVE-2020-0688-Scanner"}],"tags":[]},{"url":"https://github.com/MrTiz/CVE-2020-0688","source":"poc-in-github","sourceId":"CVE-2020-0688","description":"Remote Code Execution on Microsoft Exchange Server through fixed cryptographic keys","modified":"2026-09-17T10:34:44Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2020-0688","url":"https://github.com/MrTiz/CVE-2020-0688"},{"source":"poc-in-github","sourceId":"CVE-2020-0688","modified":"2026-09-17T10:34:44Z","url":"https://github.com/MrTiz/CVE-2020-0688"}],"tags":[]},{"url":"https://github.com/7heKnight/CVE-2020-0688","source":"poc-in-github","sourceId":"CVE-2020-0688","description":"CVE-2020-0688_Microsoft Exchange default MachineKeySection deserialize vulnerability","modified":"2023-12-04T03:36:05Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2020-0688","url":"https://github.com/7heKnight/CVE-2020-0688"},{"source":"poc-in-github","sourceId":"CVE-2020-0688","modified":"2023-12-04T03:36:05Z","url":"https://github.com/7heKnight/CVE-2020-0688"}],"tags":[]},{"url":"https://github.com/1337-llama/CVE-2020-0688-Python3","source":"poc-in-github","sourceId":"CVE-2020-0688","description":"Exploit updated to use Python 3.","modified":"2022-10-20T10:29:58Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2020-0688","url":"https://github.com/1337-llama/CVE-2020-0688-Python3"},{"source":"poc-in-github","sourceId":"CVE-2020-0688","modified":"2022-10-20T10:29:58Z","url":"https://github.com/1337-llama/CVE-2020-0688-Python3"}],"tags":[]},{"url":"https://github.com/chudamax/CVE-2020-0688-Exchange2010","source":"poc-in-github","sourceId":"CVE-2020-0688","description":"CVE-2020-0688 modified exploit for Exchange 2010 ","modified":"2026-10-14T12:37:01Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2020-0688","url":"https://github.com/chudamax/CVE-2020-0688-Exchange2010"},{"source":"poc-in-github","sourceId":"CVE-2020-0688","modified":"2026-10-14T12:37:01Z","url":"https://github.com/chudamax/CVE-2020-0688-Exchange2010"}],"tags":[]},{"url":"https://github.com/W01fh4cker/CVE-2020-0688-GUI","source":"poc-in-github","sourceId":"CVE-2020-0688","description":"GUI Exploit Tool for CVE-2020-0688(Microsoft Exchange default MachineKeySection deserialize vulnerability)","modified":"2025-03-03T21:28:13Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2020-0688","url":"https://github.com/W01fh4cker/CVE-2020-0688-GUI"},{"source":"poc-in-github","sourceId":"CVE-2020-0688","modified":"2025-03-03T21:28:13Z","url":"https://github.com/W01fh4cker/CVE-2020-0688-GUI"}],"tags":[]},{"url":"https://github.com/tvdat20004/CVE-2020-0688","source":"poc-in-github","sourceId":"CVE-2020-0688","description":"CVE-2020-0688: Remote Code Execution on Microsoft Exchange Server Through Fixed Cryptographic Keys","modified":"2025-08-04T16:02:01Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2020-0688","url":"https://github.com/tvdat20004/CVE-2020-0688"},{"source":"poc-in-github","sourceId":"CVE-2020-0688","modified":"2025-08-04T16:02:01Z","url":"https://github.com/tvdat20004/CVE-2020-0688"}],"tags":[]},{"url":"https://github.com/iamwajd/Cyber-Attack-Analysis","source":"poc-in-github","sourceId":"CVE-2020-0688","description":"A deep-dive security analysis into the 2020 Virgin Mobile KSA data breach. This study dissects the exploitation of CVE-2020-0688, evaluates the impact of delayed patch management, and proposes a robust multi-layered defense architecture to prevent sophisticated exfiltration tactics.","modified":"2026-02-18T19:55:45Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2020-0688","url":"https://github.com/iamwajd/Cyber-Attack-Analysis"},{"source":"poc-in-github","sourceId":"CVE-2020-0688","modified":"2026-02-18T19:55:45Z","url":"https://github.com/iamwajd/Cyber-Attack-Analysis"}],"tags":[]}],"cataloguedPoc":[{"url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/exchange_ecp_viewstate.rb","source":"metasploit","sourceId":"exploit/windows/http/exchange_ecp_viewstate","description":"Exchange Control Panel ViewState Deserialization","modified":"2026-04-22 11:58:31 +0000","kind":"metasploit","verification":"catalogued","origins":[{"source":"metasploit","sourceId":"exploit/windows/http/exchange_ecp_viewstate","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/exchange_ecp_viewstate.rb"},{"source":"metasploit","sourceId":"exploit/windows/http/exchange_ecp_viewstate","modified":"2026-04-22 11:58:31 +0000","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/exchange_ecp_viewstate.rb"}],"tags":[]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"6101f68c0b43","url":"https://vulncheck.com/xdb/6101f68c0b43","cve":"CVE-2020-0688","dateAdded":"2020-03-01T12:57:32Z","modified":"2020-03-10T00:00:00Z","exploitType":"remote-with-credentials","repositoryUrl":"https://github.com/zcgonvh/CVE-2020-0688","observations":[{"dateAdded":"2020-03-01T12:57:32Z","exploitType":"remote-with-credentials"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"6101f68c0b43","modified":"2020-03-10T00:00:00Z","url":"https://vulncheck.com/xdb/6101f68c0b43"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"7f793deb1114","url":"https://vulncheck.com/xdb/7f793deb1114","cve":"CVE-2020-0688","dateAdded":"2020-03-07T16:13:30+08:00","modified":"2020-03-10T00:00:00Z","exploitType":"remote-with-credentials","observations":[{"dateAdded":"2020-03-07T16:13:30+08:00","exploitType":"remote-with-credentials"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"7f793deb1114","modified":"2020-03-10T00:00:00Z","url":"https://vulncheck.com/xdb/7f793deb1114"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"ed6eb904124b","url":"https://vulncheck.com/xdb/ed6eb904124b","cve":"CVE-2020-0688","dateAdded":"2020-06-12T08:28:35Z","modified":"2020-03-10T00:00:00Z","exploitType":"remote-with-credentials","repositoryUrl":"https://github.com/w4fz5uck5/cve-2020-0688-webshell-upload-technique","observations":[{"dateAdded":"2020-06-12T08:28:35Z","exploitType":"remote-with-credentials"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"ed6eb904124b","modified":"2020-03-10T00:00:00Z","url":"https://vulncheck.com/xdb/ed6eb904124b"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"42b75e809382","url":"https://vulncheck.com/xdb/42b75e809382","cve":"CVE-2020-0688","dateAdded":"2020-08-17T12:41:51Z","modified":"2020-03-10T00:00:00Z","exploitType":"remote-with-credentials","repositoryUrl":"https://github.com/murataydemir/CVE-2020-0688","observations":[{"dateAdded":"2020-08-17T12:41:51Z","exploitType":"remote-with-credentials"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"42b75e809382","modified":"2020-03-10T00:00:00Z","url":"https://vulncheck.com/xdb/42b75e809382"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"8a20e8eac65d","url":"https://vulncheck.com/xdb/8a20e8eac65d","cve":"CVE-2020-0688","dateAdded":"2020-10-09T13:12:20+08:00","modified":"2020-03-10T00:00:00Z","exploitType":"remote-with-credentials","observations":[{"dateAdded":"2020-10-09T13:12:20+08:00","exploitType":"remote-with-credentials"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"8a20e8eac65d","modified":"2020-03-10T00:00:00Z","url":"https://vulncheck.com/xdb/8a20e8eac65d"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"ab48dae2440a","url":"https://vulncheck.com/xdb/ab48dae2440a","cve":"CVE-2020-0688","dateAdded":"2020-10-10T09:46:24Z","modified":"2020-03-10T00:00:00Z","exploitType":"remote-with-credentials","repositoryUrl":"https://github.com/Ken-Abruzzi/cve_2020_0688","observations":[{"dateAdded":"2020-10-10T09:46:24Z","exploitType":"remote-with-credentials"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"ab48dae2440a","modified":"2020-03-10T00:00:00Z","url":"https://vulncheck.com/xdb/ab48dae2440a"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"868234a5c9b7","url":"https://vulncheck.com/xdb/868234a5c9b7","cve":"CVE-2020-0688","dateAdded":"2021-01-04T10:48:40Z","modified":"2020-03-10T00:00:00Z","exploitType":"remote-with-credentials","repositoryUrl":"https://github.com/MrTiz/CVE-2020-0688","observations":[{"dateAdded":"2021-01-04T10:48:40Z","exploitType":"remote-with-credentials"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"868234a5c9b7","modified":"2020-03-10T00:00:00Z","url":"https://vulncheck.com/xdb/868234a5c9b7"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"05c78c55c273","url":"https://vulncheck.com/xdb/05c78c55c273","cve":"CVE-2020-0688","dateAdded":"2022-01-11T23:35:51+08:00","modified":"2020-03-10T00:00:00Z","exploitType":"client-side","observations":[{"dateAdded":"2022-01-11T23:35:51+08:00","exploitType":"client-side"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"05c78c55c273","modified":"2020-03-10T00:00:00Z","url":"https://vulncheck.com/xdb/05c78c55c273"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"ac5f11e6a30d","url":"https://vulncheck.com/xdb/ac5f11e6a30d","cve":"CVE-2020-0688","dateAdded":"2022-10-19T10:36:10Z","modified":"2020-03-10T00:00:00Z","exploitType":"remote-with-credentials","repositoryUrl":"https://github.com/1337-llama/CVE-2020-0688-Python3","observations":[{"dateAdded":"2022-10-19T10:36:10Z","exploitType":"remote-with-credentials"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"ac5f11e6a30d","modified":"2020-03-10T00:00:00Z","url":"https://vulncheck.com/xdb/ac5f11e6a30d"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"730fc9157ab0","url":"https://vulncheck.com/xdb/730fc9157ab0","cve":"CVE-2020-0688","dateAdded":"2023-05-25T20:13:36Z","modified":"2020-03-10T00:00:00Z","exploitType":"remote-with-credentials","repositoryUrl":"https://github.com/Ridter/cve-2020-0688","observations":[{"dateAdded":"2023-05-25T20:13:36Z","exploitType":"remote-with-credentials"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"730fc9157ab0","modified":"2020-03-10T00:00:00Z","url":"https://vulncheck.com/xdb/730fc9157ab0"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"96c707bb39f5","url":"https://vulncheck.com/xdb/96c707bb39f5","cve":"CVE-2020-0688","dateAdded":"2023-08-02T06:25:06Z","modified":"2020-03-10T00:00:00Z","exploitType":"remote-with-credentials","repositoryUrl":"https://github.com/chudamax/CVE-2020-0688-Exchange2010","observations":[{"dateAdded":"2023-08-02T06:25:06Z","exploitType":"remote-with-credentials"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"96c707bb39f5","modified":"2020-03-10T00:00:00Z","url":"https://vulncheck.com/xdb/96c707bb39f5"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"e502b8576da7","url":"https://vulncheck.com/xdb/e502b8576da7","cve":"CVE-2020-0688","dateAdded":"2023-12-20T22:09:33Z","modified":"2020-03-10T00:00:00Z","exploitType":"remote-with-credentials","repositoryUrl":"https://github.com/zyn3rgy/ecp_slap","observations":[{"dateAdded":"2023-12-20T22:09:33Z","exploitType":"remote-with-credentials"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"e502b8576da7","modified":"2020-03-10T00:00:00Z","url":"https://vulncheck.com/xdb/e502b8576da7"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"7937e058bdf2","url":"https://vulncheck.com/xdb/7937e058bdf2","cve":"CVE-2020-0688","dateAdded":"2023-12-21T01:20:12Z","modified":"2020-03-10T00:00:00Z","exploitType":"remote-with-credentials","repositoryUrl":"https://github.com/kaisaryousuf/CVE-2020-0688","observations":[{"dateAdded":"2023-12-21T01:20:12Z","exploitType":"remote-with-credentials"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"7937e058bdf2","modified":"2020-03-10T00:00:00Z","url":"https://vulncheck.com/xdb/7937e058bdf2"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"c2dc4dbb6f66","url":"https://vulncheck.com/xdb/c2dc4dbb6f66","cve":"CVE-2020-0688","dateAdded":"2023-12-21T01:20:15Z","modified":"2020-03-10T00:00:00Z","exploitType":"remote-with-credentials","repositoryUrl":"https://github.com/Yt1g3r/CVE-2020-0688_EXP","observations":[{"dateAdded":"2023-12-21T01:20:15Z","exploitType":"remote-with-credentials"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"c2dc4dbb6f66","modified":"2020-03-10T00:00:00Z","url":"https://vulncheck.com/xdb/c2dc4dbb6f66"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"f58d70470909","url":"https://vulncheck.com/xdb/f58d70470909","cve":"CVE-2020-0688","dateAdded":"2023-12-21T01:20:23Z","modified":"2020-03-10T00:00:00Z","exploitType":"remote-with-credentials","repositoryUrl":"https://github.com/7heKnight/CVE-2020-0688","observations":[{"dateAdded":"2023-12-21T01:20:23Z","exploitType":"remote-with-credentials"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"f58d70470909","modified":"2020-03-10T00:00:00Z","url":"https://vulncheck.com/xdb/f58d70470909"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"1fe8a75efd31","url":"https://vulncheck.com/xdb/1fe8a75efd31","cve":"CVE-2020-0688","dateAdded":"2024-10-22T04:16:35Z","modified":"2020-03-10T00:00:00Z","exploitType":"remote-with-credentials","repositoryUrl":"https://github.com/W01fh4cker/CVE-2020-0688-GUI","observations":[{"dateAdded":"2024-10-22T04:16:35Z","exploitType":"remote-with-credentials"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"1fe8a75efd31","modified":"2020-03-10T00:00:00Z","url":"https://vulncheck.com/xdb/1fe8a75efd31"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"ae5d257ebb54","url":"https://vulncheck.com/xdb/ae5d257ebb54","cve":"CVE-2020-0688","dateAdded":"2025-08-05T02:49:08Z","modified":"2020-03-10T00:00:00Z","exploitType":"remote-with-credentials","repositoryUrl":"https://github.com/tvdat20004/CVE-2020-0688","observations":[{"dateAdded":"2025-08-05T02:49:08Z","exploitType":"remote-with-credentials"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"ae5d257ebb54","modified":"2020-03-10T00:00:00Z","url":"https://vulncheck.com/xdb/ae5d257ebb54"}]}],"vendorStatements":[],"exploitationSources":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","catalog":"VulnCheck KEV","kind":"catalogue","url":"https://vulncheck.com/kev","dateAdded":"2020-03-10T00:00:00Z","modified":"2020-03-10T00:00:00Z","requiredAction":"Apply updates per vendor instructions.","knownRansomwareCampaignUse":"Known","reportedByVulncheckCanaries":false,"vendorProject":"Microsoft","product":"Exchange Server","dueDate":"2022-05-03T00:00:00Z","cisaDateAdded":"2021-11-03T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","modified":"2020-03-10T00:00:00Z","url":"https://vulncheck.com/kev"}]},{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","catalog":"VulnCheck KEV","kind":"report","url":"https://cisa.gov/news-events/alerts/2020/03/10/unpatched-microsoft-exchange-servers-vulnerable-cve-2020-0688","dateAdded":"2020-03-10T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","url":"https://cisa.gov/news-events/alerts/2020/03/10/unpatched-microsoft-exchange-servers-vulnerable-cve-2020-0688"}]},{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","catalog":"VulnCheck KEV","kind":"report","url":"https://www.welivesecurity.com/wp-content/uploads/2021/05/eset_threat_report_t12021.pdf","dateAdded":"2020-06-21T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","url":"https://www.welivesecurity.com/wp-content/uploads/2021/05/eset_threat_report_t12021.pdf"}]},{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","catalog":"VulnCheck KEV","kind":"report","url":"https://cisa.gov/news-events/cybersecurity-advisories/aa20-275a","dateAdded":"2020-10-20T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","url":"https://cisa.gov/news-events/cybersecurity-advisories/aa20-275a"},{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","url":"https://media.cert.europa.eu/static/MEMO/2020/TLP-WHITE-CERT-EU-THREAT-MEMO-Thanos-ransomware.pdf"},{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","url":"https://media.defense.gov/2020/Oct/20/2002519884/-1/-1/0/CSA_CHINESE_EXPLOIT_VULNERABILITIES_UOO179811.PDF"},{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","url":"https://us-cert.cisa.gov/ncas/alerts/aa20-275a"}]},{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","catalog":"VulnCheck KEV","kind":"report","url":"https://us-cert.cisa.gov/ncas/alerts/aa20-296a","dateAdded":"2020-10-22T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","url":"https://us-cert.cisa.gov/ncas/alerts/aa20-296a"}]},{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","catalog":"VulnCheck KEV","kind":"report","url":"https://cisa.gov/news-events/cybersecurity-advisories/aa20-258a","dateAdded":"2020-10-24T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","url":"https://cisa.gov/news-events/cybersecurity-advisories/aa20-258a"}]},{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","catalog":"VulnCheck KEV","kind":"report","url":"https://cisa.gov/news-events/cybersecurity-advisories/aa20-296a","dateAdded":"2020-12-01T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","url":"https://cisa.gov/news-events/cybersecurity-advisories/aa20-296a"}]},{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","catalog":"VulnCheck KEV","kind":"report","url":"https://cdn.pathfactory.com/assets/10753/contents/298161/03f15d14-01bb-462b-a8d4-d8c6149f5604.pdf","dateAdded":"2021-03-05T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","url":"https://cdn.pathfactory.com/assets/10753/contents/298161/03f15d14-01bb-462b-a8d4-d8c6149f5604.pdf"}]},{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","catalog":"VulnCheck KEV","kind":"report","url":"https://www.cisa.gov/news-events/cybersecurity-advisories/aa21-209a","dateAdded":"2021-08-20T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","url":"https://www.cisa.gov/news-events/cybersecurity-advisories/aa21-209a"}]},{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","catalog":"VulnCheck KEV","kind":"report","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","dateAdded":"2021-11-03T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}]},{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","catalog":"VulnCheck KEV","kind":"report","url":"https://www.sentinelone.com/labs/wading-through-muddy-waters-recent-activity-of-an-iranian-state-sponsored-threat-actor/","dateAdded":"2022-01-12T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","url":"https://www.sentinelone.com/labs/wading-through-muddy-waters-recent-activity-of-an-iranian-state-sponsored-threat-actor/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","catalog":"VulnCheck KEV","kind":"report","url":"https://threatpost.com/us-military-ties-muddywater-cyberespionage-apt-iran/177633/","dateAdded":"2022-01-13T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","url":"https://threatpost.com/us-military-ties-muddywater-cyberespionage-apt-iran/177633/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","catalog":"VulnCheck KEV","kind":"report","url":"https://cisa.gov/news-events/cybersecurity-advisories/aa22-047a","dateAdded":"2022-02-16T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","url":"https://cisa.gov/news-events/cybersecurity-advisories/aa22-047a"}]},{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","catalog":"VulnCheck KEV","kind":"report","url":"https://cisa.gov/news-events/cybersecurity-advisories/aa22-055a","dateAdded":"2022-02-24T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","url":"https://cisa.gov/news-events/cybersecurity-advisories/aa22-055a"},{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","url":"https://www.cisa.gov/uscert/ncas/alerts/aa22-055a"}]},{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","catalog":"VulnCheck KEV","kind":"report","url":"https://cisa.gov/news-events/alerts/2022/01/11/understanding-and-mitigating-russian-state-sponsored-cyber-threats-us","dateAdded":"2022-03-01T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","url":"https://cisa.gov/news-events/alerts/2022/01/11/understanding-and-mitigating-russian-state-sponsored-cyber-threats-us"},{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","url":"https://cisa.gov/news-events/cybersecurity-advisories/aa22-011a"},{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","url":"https://www.cisa.gov/uscert/ncas/alerts/aa22-011a"}]},{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","catalog":"VulnCheck KEV","kind":"report","url":"https://www.tenable.com/blog/contileaks-chats-reveal-over-30-vulnerabilities-used-by-conti-ransomware-affiliates","dateAdded":"2022-03-24T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","url":"https://www.tenable.com/blog/contileaks-chats-reveal-over-30-vulnerabilities-used-by-conti-ransomware-affiliates"}]},{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","catalog":"VulnCheck KEV","kind":"report","url":"https://www.pwc.com/gx/en/issues/cybersecurity/cyber-threat-intelligence/cyber-year-in-retrospect/yir-cyber-threats-annex-download.pdf","dateAdded":"2022-04-26T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","url":"https://www.pwc.com/gx/en/issues/cybersecurity/cyber-threat-intelligence/cyber-year-in-retrospect/yir-cyber-threats-annex-download.pdf"}]},{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","catalog":"VulnCheck KEV","kind":"report","url":"https://cisa.gov/news-events/alerts/2022/04/27/2021-top-routinely-exploited-vulnerabilities","dateAdded":"2022-04-28T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","url":"https://cisa.gov/news-events/alerts/2022/04/27/2021-top-routinely-exploited-vulnerabilities"},{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","url":"https://cisa.gov/news-events/cybersecurity-advisories/aa22-117a"}]},{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","catalog":"VulnCheck KEV","kind":"report","url":"https://static.tenable.com/marketing/whitepapers/Whitepaper-Ransomware_Ecosystem.pdf","dateAdded":"2022-06-22T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","url":"https://static.tenable.com/marketing/whitepapers/Whitepaper-Ransomware_Ecosystem.pdf"}]},{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","catalog":"VulnCheck KEV","kind":"report","url":"https://www.securin.io/articles/all-about-conti-ransomware/","dateAdded":"2022-06-29T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","url":"https://www.securin.io/articles/all-about-conti-ransomware/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","catalog":"VulnCheck KEV","kind":"report","url":"https://www.pwc.com/gx/en/issues/cybersecurity/cyber-threat-intelligence/muddy-advanced-persistent-teacher.html","dateAdded":"2022-11-10T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","url":"https://www.pwc.com/gx/en/issues/cybersecurity/cyber-threat-intelligence/muddy-advanced-persistent-teacher.html"}]},{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","catalog":"VulnCheck KEV","kind":"report","url":"https://www.prodaft.com/m/reports/FIN7_TLPCLEAR.pdf","dateAdded":"2022-12-21T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","url":"https://www.prodaft.com/m/reports/FIN7_TLPCLEAR.pdf"}]},{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","catalog":"VulnCheck KEV","kind":"report","url":"https://www.group-ib.com/resources/research-hub/hi-tech-crime-trends-2022/","dateAdded":"2023-01-17T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","url":"https://www.group-ib.com/resources/research-hub/hi-tech-crime-trends-2022/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","catalog":"VulnCheck KEV","kind":"report","url":"https://www.fortinet.com/blog/threat-research/operation-total-exchange-backdoor-discovered","dateAdded":"2023-05-24T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","url":"https://www.fortinet.com/blog/threat-research/operation-total-exchange-backdoor-discovered"}]},{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","catalog":"VulnCheck KEV","kind":"report","url":"https://www.cert.ssi.gouv.fr/uploads/CERTFR-2023-CTI-009.pdf","dateAdded":"2023-10-26T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","url":"https://www.cert.ssi.gouv.fr/uploads/CERTFR-2023-CTI-009.pdf"}]},{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","catalog":"VulnCheck KEV","kind":"report","url":"https://rt-solar.ru/solar-4rays/blog/4329/","dateAdded":"2024-05-17T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","url":"https://rt-solar.ru/solar-4rays/blog/4329/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","catalog":"VulnCheck KEV","kind":"report","url":"https://www.f5.com/labs/articles/threat-intelligence/2024-ddos-attack-trends","dateAdded":"2024-07-16T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","url":"https://www.f5.com/labs/articles/threat-intelligence/2024-ddos-attack-trends"}]},{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","catalog":"VulnCheck KEV","kind":"report","url":"https://zeroed.tech/blog/viewstate-the-unpatchable-iis-forever-day-being-actively-exploited/","dateAdded":"2024-07-21T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","url":"https://zeroed.tech/blog/viewstate-the-unpatchable-iis-forever-day-being-actively-exploited/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","catalog":"VulnCheck KEV","kind":"report","url":"https://www.f5.com/labs/articles/threat-intelligence/sensor-intel-series-top-cves-june-2024","dateAdded":"2024-07-25T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","url":"https://www.f5.com/labs/articles/threat-intelligence/sensor-intel-series-top-cves-june-2024"}]},{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","catalog":"VulnCheck KEV","kind":"report","url":"https://content.kaspersky-labs.com/fm/site-editor/33/3318ec849851138088d24f26d236f469/source/irreport.pdf","dateAdded":"2025-03-12T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","url":"https://content.kaspersky-labs.com/fm/site-editor/33/3318ec849851138088d24f26d236f469/source/irreport.pdf"}]},{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","catalog":"VulnCheck KEV","kind":"report","url":"https://securelist.com/ghostcontainer/116953/","dateAdded":"2025-07-17T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","url":"https://securelist.com/ghostcontainer/116953/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","catalog":"VulnCheck KEV","kind":"report","url":"https://fortiguard.fortinet.com/threat-signal-report/6276","dateAdded":"2025-11-27T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","url":"https://fortiguard.fortinet.com/threat-signal-report/6276"}]},{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","catalog":"VulnCheck KEV","kind":"report","url":"https://fortiguard.fortinet.com/outbreak-alert/unc1549-espionage-attack","dateAdded":"2025-12-02T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","url":"https://fortiguard.fortinet.com/outbreak-alert/unc1549-espionage-attack"}]},{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","catalog":"VulnCheck KEV","kind":"report","url":"https://cf-assets.www.cloudflare.com/slt3lc6tev37/sWDBUMNVtEJB9ZFLt1dUU/8d69e92de2edfb3bf59e7d21d57e7e1a/Cloudflare-2026-threat-report.pdf","dateAdded":"2026-03-03T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","url":"https://cf-assets.www.cloudflare.com/slt3lc6tev37/sWDBUMNVtEJB9ZFLt1dUU/8d69e92de2edfb3bf59e7d21d57e7e1a/Cloudflare-2026-threat-report.pdf"}]},{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","catalog":"VulnCheck KEV","kind":"report","url":"https://services.google.com/fh/files/misc/cloud_threat_horizons_report_h12026.pdf","dateAdded":"2026-03-09T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","url":"https://services.google.com/fh/files/misc/cloud_threat_horizons_report_h12026.pdf"}]},{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","catalog":"VulnCheck KEV","kind":"report","url":"https://www.tenable.com/blog/cyber-retaliation-analyzing-iranian-cyber-activity-following-operation-epic-fury","dateAdded":"2026-03-11T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","url":"https://www.tenable.com/blog/cyber-retaliation-analyzing-iranian-cyber-activity-following-operation-epic-fury"}]},{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","catalog":"VulnCheck KEV","kind":"report","url":"https://horizon3.ai/wp-content/uploads/2026/03/Iranian_APT_TTP_Report_2026.pdf","dateAdded":"2026-03-16T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","url":"https://horizon3.ai/wp-content/uploads/2026/03/Iranian_APT_TTP_Report_2026.pdf"}]},{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","catalog":"VulnCheck KEV","kind":"report","url":"https://fortiguard.fortinet.com/outbreak-alert/iran-linked-cyber-attacks","dateAdded":"2026-03-31T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","url":"https://fortiguard.fortinet.com/outbreak-alert/iran-linked-cyber-attacks"}]},{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","catalog":"VulnCheck KEV","kind":"report","url":"https://intrusiontruth.wordpress.com/2026/07/28/turns-out-the-ghost-was-the-pla/","dateAdded":"2026-07-28T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2020-0688","url":"https://intrusiontruth.wordpress.com/2026/07/28/turns-out-the-ghost-was-the-pla/"}]}]}