Search Results (Refine Search)
- CPE Product Version: cpe:/a:microsoft:exchange_server:2016:cumulative_update_13
Vuln ID | Summary | CVSS Severity |
---|---|---|
CVE-2023-36777 |
Microsoft Exchange Server Information Disclosure Vulnerability Published: September 12, 2023; 1:15:14 PM -0400 |
V3.1: 5.7 MEDIUM V2.0:(not available) |
CVE-2023-21709 |
Microsoft Exchange Server Elevation of Privilege Vulnerability Published: August 08, 2023; 2:15:11 PM -0400 |
V3.1: 9.8 CRITICAL V2.0:(not available) |
CVE-2021-27065 |
Microsoft Exchange Server Remote Code Execution Vulnerability Published: March 02, 2021; 7:15:12 PM -0500 |
V3.1: 7.8 HIGH V2.0: 6.8 MEDIUM |
CVE-2021-26855 |
Microsoft Exchange Server Remote Code Execution Vulnerability Published: March 02, 2021; 7:15:12 PM -0500 |
V3.1: 9.1 CRITICAL V2.0: 7.5 HIGH |
CVE-2019-1373 |
A remote code execution vulnerability exists in Microsoft Exchange through the deserialization of metadata via PowerShell, aka 'Microsoft Exchange Remote Code Execution Vulnerability'. Published: November 12, 2019; 2:15:12 PM -0500 |
V3.1: 9.8 CRITICAL V2.0: 7.5 HIGH |
CVE-2019-1266 |
A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web App (OWA) fails to properly handle web requests, aka 'Microsoft Exchange Spoofing Vulnerability'. Published: September 11, 2019; 6:15:17 PM -0400 |
V3.1: 6.1 MEDIUM V2.0: 4.3 MEDIUM |
CVE-2019-1233 |
A denial of service vulnerability exists in Microsoft Exchange Server software when the software fails to properly handle objects in memory, aka 'Microsoft Exchange Denial of Service Vulnerability'. Published: September 11, 2019; 6:15:15 PM -0400 |
V3.1: 7.5 HIGH V2.0: 7.8 HIGH |
CVE-2019-1137 |
A cross-site-scripting (XSS) vulnerability exists when Microsoft Exchange Server does not properly sanitize a specially crafted web request to an affected Exchange server, aka 'Microsoft Exchange Server Spoofing Vulnerability'. Published: July 15, 2019; 3:15:21 PM -0400 |
V3.1: 5.4 MEDIUM V2.0: 3.5 LOW |
CVE-2019-1084 |
An information disclosure vulnerability exists when Exchange allows creation of entities with Display Names having non-printable characters. An authenticated attacker could exploit this vulnerability by creating entities with invalid display names, which, when added to conversations, remain invisible. This security update addresses the issue by validating display names upon creation in Microsoft Exchange, and by rendering invalid display names correctly in Microsoft Outlook clients., aka 'Microsoft Exchange Information Disclosure Vulnerability'. Published: July 15, 2019; 3:15:17 PM -0400 |
V3.0: 6.5 MEDIUM V2.0: 4.0 MEDIUM |