U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Search Results (Refine Search)

Search Parameters:
  • Keyword (text search): cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_23:*:*:*:*:*:*
  • CPE Name Search: true
There are 51 matching records.
Displaying matches 21 through 40.
Vuln ID Summary CVSS Severity
CVE-2023-21529

Microsoft Exchange Server Remote Code Execution Vulnerability

Published: February 14, 2023; 3:15:11 PM -0500
V3.1: 8.8 HIGH
V2.0:(not available)
CVE-2023-21764

Microsoft Exchange Server Elevation of Privilege Vulnerability

Published: January 10, 2023; 5:15:19 PM -0500
V3.1: 7.8 HIGH
V2.0:(not available)
CVE-2023-21763

Microsoft Exchange Server Elevation of Privilege Vulnerability

Published: January 10, 2023; 5:15:19 PM -0500
V3.1: 7.8 HIGH
V2.0:(not available)
CVE-2023-21762

Microsoft Exchange Server Spoofing Vulnerability

Published: January 10, 2023; 5:15:18 PM -0500
V3.1: 8.0 HIGH
V2.0:(not available)
CVE-2023-21761

Microsoft Exchange Server Information Disclosure Vulnerability

Published: January 10, 2023; 5:15:18 PM -0500
V3.1: 7.5 HIGH
V2.0:(not available)
CVE-2023-21745

Microsoft Exchange Server Spoofing Vulnerability

Published: January 10, 2023; 5:15:18 PM -0500
V3.1: 8.0 HIGH
V2.0:(not available)
CVE-2022-41123

Microsoft Exchange Server Elevation of Privilege Vulnerability

Published: November 09, 2022; 5:15:25 PM -0500
V3.1: 7.8 HIGH
V2.0:(not available)
CVE-2022-41080

Microsoft Exchange Server Elevation of Privilege Vulnerability

Published: November 09, 2022; 5:15:21 PM -0500
V3.1: 8.8 HIGH
V2.0:(not available)
CVE-2022-41079

Microsoft Exchange Server Spoofing Vulnerability

Published: November 09, 2022; 5:15:21 PM -0500
V3.1: 8.0 HIGH
V2.0:(not available)
CVE-2022-41078

Microsoft Exchange Server Spoofing Vulnerability

Published: November 09, 2022; 5:15:21 PM -0500
V3.1: 8.0 HIGH
V2.0:(not available)
CVE-2022-41082

Microsoft Exchange Server Remote Code Execution Vulnerability

Published: October 02, 2022; 9:15:08 PM -0400
V3.1: 8.0 HIGH
V2.0:(not available)
CVE-2022-41040

Microsoft Exchange Server Elevation of Privilege Vulnerability

Published: October 02, 2022; 9:15:08 PM -0400
V3.1: 8.8 HIGH
V2.0:(not available)
CVE-2022-34692

Microsoft Exchange Server Information Disclosure Vulnerability

Published: August 09, 2022; 4:15:10 PM -0400
V3.1: 5.3 MEDIUM
V2.0:(not available)
CVE-2022-30134

Microsoft Exchange Server Information Disclosure Vulnerability

Published: August 09, 2022; 4:15:09 PM -0400
V3.1: 6.5 MEDIUM
V2.0:(not available)
CVE-2022-24516

Microsoft Exchange Server Elevation of Privilege Vulnerability

Published: August 09, 2022; 4:15:09 PM -0400
V3.1: 8.0 HIGH
V2.0:(not available)
CVE-2022-24477

Microsoft Exchange Server Elevation of Privilege Vulnerability

Published: August 09, 2022; 4:15:09 PM -0400
V3.1: 8.0 HIGH
V2.0:(not available)
CVE-2022-21980

Microsoft Exchange Server Elevation of Privilege Vulnerability

Published: August 09, 2022; 4:15:09 PM -0400
V3.1: 8.0 HIGH
V2.0:(not available)
CVE-2022-21979

Microsoft Exchange Server Information Disclosure Vulnerability

Published: August 09, 2022; 4:15:09 PM -0400
V3.1: 4.8 MEDIUM
V2.0:(not available)
CVE-2022-21978

Microsoft Exchange Server Elevation of Privilege Vulnerability

Published: May 10, 2022; 5:15:09 PM -0400
V3.1: 8.2 HIGH
V2.0: 7.2 HIGH
CVE-2017-11940

The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Windows 7 SP1, Windows 8.1, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, 1709 and Windows Server 2016, Windows Server, version 1709, Microsoft Exchange Server 2013 and 2016, does not properly scan a specially crafted file leading to remote code execution. aka "Microsoft Malware Protection Engine Remote Code Execution Vulnerability". This is different than CVE-2017-11937.

Published: December 08, 2017; 9:29:00 AM -0500
V3.0: 7.8 HIGH
V2.0: 9.3 HIGH