VULNERABILITY INTELLIGENCE
CVE-2014-0294
CVSS score10 HIGH
EPSS probability20.89%
CISA KEVNot currently listed
Published2014-02-12
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Description
Microsoft Forefront Protection 2010 for Exchange Server does not properly parse e-mail content, which might allow remote attackers to execute arbitrary code via a crafted message, aka "RCE Vulnerability."
Weakness classification
- CWE-94: Improper Control of Generation of Code ('Code Injection')