Known vulnerabilities in Microsoft Exchange Server 2013 Cumulative Update 23 15.00.1497.002

Vendor: Microsoft
Version: 2013 Cumulative Update 23 15.00.1497.002
Software CPE: cpe:2.3:a:microsoft:microsoft_exchange_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 55
Public exploits: 18
Known exploited (KEV): 14
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Microsoft Exchange Server version 2013 Cumulative Update 23 15.00.1497.002 Microsoft Exchange Server 2013 Cumulative Update 23 15.00.1497.002 is affected by 55 vulnerabilities: 6 critical, 13 high, 25 medium, 11 low Critical High Medium Low

Vulnerabilities (55)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU72174 - Exposed Dangerous Method or Function
CVE-2023-21529
CWE-749 High
No
Exploited
2013 CU23 Feb23SU 15.00.1497.047, 2016 CU23 Feb23SU 15.01.2507.021, 2019 CU11 Feb23SU 15.02.0986.041, 2019 CU12 Feb23SU 15.02.1118.025 14.02.2023 SB2023021424
#VU72173 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-21707
CWE-94 High
Public exploit available
No
2013 CU23 Feb23SU 15.00.1497.047, 2016 CU23 Feb23SU 15.01.2507.021, 2019 CU11 Feb23SU 15.02.0986.041, 2019 CU12 Feb23SU 15.02.1118.025 14.02.2023 SB2023021424
#VU72172 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-21706
CWE-94 High
No
No
2013 CU23 Feb23SU 15.00.1497.047, 2016 CU23 Feb23SU 15.01.2507.021, 2019 CU11 Feb23SU 15.02.0986.041, 2019 CU12 Feb23SU 15.02.1118.025 14.02.2023 SB2023021424
#VU72171 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-21710
CWE-94 Medium
No
No
2013 CU23 Feb23SU 15.00.1497.047, 2016 CU23 Feb23SU 15.01.2507.021, 2019 CU11 Feb23SU 15.02.0986.041, 2019 CU12 Feb23SU 15.02.1118.025 14.02.2023 SB2023021424
#VU70912 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2023-21762
CWE-300 Medium
No
No
2013 CU23 Jan23SU 15.00.1497.045, 2016 CU23 Jan23SU 15.01.2507.017, 2019 CU11 Jan23SU 15.02.0986.037, 2019 CU12 Jan23SU 15.02.1118.021 10.01.2023 SB2023011045
#VU69097 - Permissions, Privileges, and Access Controls
CVE-2022-41080
CWE-264 High
No
Exploited
2013 CU23 Nov22SU 15.00.1497.044, 2016 CU22 Nov22SU 15.01.2375.037, 2016 CU23 Nov22SU 15.01.2507.016, 2019 CU11 Nov22SU 15.02.0986.036, 2019 CU12 Nov22SU 15.02.1118.020 08.11.2022 SB2022110823
#VU69096 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2022-41079
CWE-451 Medium
No
No
2013 CU23 Nov22SU 15.00.1497.044, 2016 CU22 Nov22SU 15.01.2375.037, 2016 CU23 Nov22SU 15.01.2507.016, 2019 CU11 Nov22SU 15.02.0986.036, 2019 CU12 Nov22SU 15.02.1118.020 08.11.2022 SB2022110823
#VU69093 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2022-41078
CWE-451 Medium
No
No
2013 CU23 Nov22SU 15.00.1497.044, 2016 CU22 Nov22SU 15.01.2375.037, 2016 CU23 Nov22SU 15.01.2507.016, 2019 CU11 Nov22SU 15.02.0986.036, 2019 CU12 Nov22SU 15.02.1118.020 08.11.2022 SB2022110823
#VU67770 - Server-Side Request Forgery (SSRF)
CVE-2022-41040
CWE-918 Critical
Public exploit available
Exploited
2013 CU23 Nov22SU 15.00.1497.044, 2016 CU22 Nov22SU 15.01.2375.037, 2016 CU23 Nov22SU 15.01.2507.016, 2019 CU11 Nov22SU 15.02.0986.036, 2019 CU12 Nov22SU 15.02.1118.020 30.09.2022 SB2022093001
#VU67764 - Deserialization of Untrusted Data
CVE-2022-41082
CWE-502 Critical
Public exploit available
Exploited
2013 CU23 Nov22SU 15.00.1497.044, 2016 CU22 Nov22SU 15.01.2375.037, 2016 CU23 Nov22SU 15.01.2507.016, 2019 CU11 Nov22SU 15.02.0986.036, 2019 CU12 Nov22SU 15.02.1118.020 30.09.2022 SB2022093001
#VU66301 - Improper Access Control
CVE-2022-30134
CWE-284 Medium
No
No
2013 Cumulative Update 23 Aug22SU 15.00.1497.040, 2016 Cumulative Update 22 Aug22SU 15.01.2375.031, 2016 Cumulative Update 23 Aug22SU 15.01.2507.012, 2019 Cumulative Update 11 Aug22SU 15.02.0986.029, 2019 Cumulative Update 12 Aug22SU 15.02.1118.012 09.08.2022 SB2022080933
#VU66300 - Permissions, Privileges, and Access Controls
CVE-2022-24477
CWE-264 Medium
No
No
2013 Cumulative Update 23 Aug22SU 15.00.1497.040, 2016 Cumulative Update 22 Aug22SU 15.01.2375.031, 2016 Cumulative Update 23 Aug22SU 15.01.2507.012, 2019 Cumulative Update 11 Aug22SU 15.02.0986.029, 2019 Cumulative Update 12 Aug22SU 15.02.1118.012 09.08.2022 SB2022080933
#VU66297 - Permissions, Privileges, and Access Controls
CVE-2022-24516
CWE-264 Medium
No
No
2013 Cumulative Update 23 Aug22SU 15.00.1497.040, 2016 Cumulative Update 22 Aug22SU 15.01.2375.031, 2016 Cumulative Update 23 Aug22SU 15.01.2507.012, 2019 Cumulative Update 11 Aug22SU 15.02.0986.029, 2019 Cumulative Update 12 Aug22SU 15.02.1118.012 09.08.2022 SB2022080933
#VU66292 - Permissions, Privileges, and Access Controls
CVE-2022-21980
CWE-264 Medium
No
No
2013 Cumulative Update 23 Aug22SU 15.00.1497.040, 2016 Cumulative Update 22 Aug22SU 15.01.2375.031, 2016 Cumulative Update 23 Aug22SU 15.01.2507.012, 2019 Cumulative Update 11 Aug22SU 15.02.0986.029, 2019 Cumulative Update 12 Aug22SU 15.02.1118.012 09.08.2022 SB2022080933
#VU66288 - Improper Access Control
CVE-2022-21979
CWE-284 Medium
No
No
2013 Cumulative Update 23 Aug22SU 15.00.1497.040, 2016 Cumulative Update 22 Aug22SU 15.01.2375.031, 2016 Cumulative Update 23 Aug22SU 15.01.2507.012, 2019 Cumulative Update 11 Aug22SU 15.02.0986.029, 2019 Cumulative Update 12 Aug22SU 15.02.1118.012 09.08.2022 SB2022080933
#VU62993 - Permissions, Privileges, and Access Controls
CVE-2022-21978
CWE-264 Low
No
No
- 11.05.2022 SB2022051106
#VU61124 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-23277
CWE-94 High
Public exploit available
No
- 08.03.2022 SB2022030818
#VU59411 - Improper input validation
CVE-2022-21855
CWE-20 Medium
No
No
- 11.01.2022 SB2022011125
#VU59410 - Improper input validation
CVE-2022-21969
CWE-20 Medium
No
No
- 11.01.2022 SB2022011125
#VU59409 - Improper input validation
CVE-2022-21846
CWE-20 Medium
No
No
- 11.01.2022 SB2022011125


Showing elements 1 - 20 out of 55