OMENWAVE modelled vulnerability-chaining pathways

CVE-2021-41349

Microsoft Exchange Server Spoofing Vulnerability

6.5
CVSS Medium
93.5%
EPSS p100
no
In CISA KEV

Data as of 2 Nov 2026 · NVD, CISA KEV, EPSS

Why chaining, at machine speed

Defenders still triage vulnerabilities one CVE at a time, while increasingly automated attackers combine them at machine speed. Omenwave models the plausible pathways by which this CVE could be chained with others — surfacing them for research and awareness, with evidence for each step.

Modelled capability profile
Kill-chain stage
RECON
Requires
NONE access, NETWORK vector, user interaction
Grants
NONE access
Capabilities
information disclosure
Model confidence
medium · CVSS 3.1
Top plausible next hops
CVE-2022-41040RECON → EXECUTIONlow plausibility · KEV

The source discloses information that may contain usable credentials, which could satisfy the destination's authentication requirement (lower confidence).

Microsoft Exchange Server Elevation of Privilege Vulnerability

CVE-2020-0688RECON → EXECUTIONlow plausibility · KEV

The source discloses information that may contain usable credentials, which could satisfy the destination's authentication requirement (lower confidence).

A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka 'Micros…

CVE-2022-41082RECON → EXECUTIONlow plausibility · KEV

The source discloses information that may contain usable credentials, which could satisfy the destination's authentication requirement (lower confidence).

Microsoft Exchange Server Remote Code Execution Vulnerability

CVE-2021-42321RECON → EXECUTIONlow plausibility · KEV

The source discloses information that may contain usable credentials, which could satisfy the destination's authentication requirement (lower confidence).

Microsoft Exchange Server Remote Code Execution Vulnerability

CVE-2019-1003030RECON → PRIV_ESClow plausibility · KEV

The source discloses information that may contain usable credentials, which could satisfy the destination's authentication requirement (lower confidence).

A sandbox bypass vulnerability exists in Jenkins Pipeline: Groovy Plugin 2.63 and earlier in pom.xml, src/main/java/org/jenkinsci/plugins/workflow/cp…

Open in the interactive explorer →
Embed this snapshot

Paste this into a blog post or report — it renders a compact, exploit-free chain snapshot.

Modelled plausible chaining potential derived from public CVE metadata (CVSS, CWE, CPE). Not a confirmed real-world exploit chain and contains no exploitation detail. For research and awareness only.

Methodology · Interactive explorer · JSON: /cve/CVE-2021-41349