Known vulnerabilities in Microsoft Exchange Server 2010

Vendor: Microsoft
Software: Microsoft Exchange Server
Version: 2010
Software CPE: cpe:2.3:a:microsoft:microsoft_exchange_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 29
Public exploits: 1
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Microsoft Exchange Server version 2010 Microsoft Exchange Server 2010 is affected by 29 vulnerabilities: 14 high, 2 medium, 13 low Critical High Medium Low

Vulnerabilities (29)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU48886 - Improper input validation
CVE-2020-17144		 CWE-20 High
Public exploit available
Exploited
 2010 Service Pack 3 Update Rollup 31 08.12.2020 SB2020120847
#VU19080 - Improper input validation
CVE-2019-1084		 CWE-20 Low
No
No
 - 10.07.2019 SB2019071001
#VU19079 - Improper Authentication
CVE-2019-1136		 CWE-287 Medium
No
No
 - 10.07.2019 SB2019071002
#VU19077 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
 CWE-79 Medium
No
No
 - 09.07.2019 SB2019070909
#VU15841 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2018-8581		 CWE-300 Low
No
Exploited
 - 13.11.2018 SB2018111313
#VU15268 - Uncontrolled Search Path Element
CVE-2010-3190		 CWE-427 High
No
No
 - 09.10.2018 SB2018101002
SB2022110105
#VU14369 - Memory corruption
CVE-2018-8302		 CWE-119 High
No
No
 - 14.08.2018 SB2018081411
#VU11928 - Permissions, Privileges, and Access Controls
CVE-2018-2806		 CWE-264 Low
No
No
 - 19.04.2018 SB2018041914
SB2018062101
#VU11927 - Permissions, Privileges, and Access Controls
CVE-2018-2801		 CWE-264 Low
No
No
 - 19.04.2018 SB2018041914
SB2018062101
#VU11924 - Permissions, Privileges, and Access Controls
CVE-2018-2768		 CWE-264 Low
No
No
 - 19.04.2018 SB2018041914
SB2018062101
#VU7454 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2017-8621		 CWE-601 Low
No
No
 - 11.07.2017 SB2017071121
#VU2624 - Exposure of sensitive information to an unauthorized actor
CVE-2016-3574		 CWE-200 Low
No
No
 - 30.11.-0001 SB2016091306
#VU2625 - Permissions, Privileges, and Access Controls
CVE-2016-3575		 CWE-264 High
No
No
 - 30.11.-0001 SB2016091306
#VU2626 - Permissions, Privileges, and Access Controls
CVE-2016-3576		 CWE-264 Low
No
No
 - 30.11.-0001 SB2016091306
#VU2627 - Permissions, Privileges, and Access Controls
CVE-2016-3577		 CWE-264 Low
No
No
 - 30.11.-0001 SB2016091306
#VU2628 - Permissions, Privileges, and Access Controls
CVE-2016-3578		 CWE-264 Low
No
No
 - 30.11.-0001 SB2016091306
#VU2629 - Permissions, Privileges, and Access Controls
CVE-2016-3579		 CWE-264 Low
No
No
 - 30.11.-0001 SB2016091306
#VU2630 - Permissions, Privileges, and Access Controls
CVE-2016-3580		 CWE-264 Low
No
No
 - 30.11.-0001 SB2016091306
#VU2634 - Permissions, Privileges, and Access Controls
CVE-2016-3590		 CWE-264 Low
No
No
 - 30.11.-0001 SB2016091306
#VU2635 - Permissions, Privileges, and Access Controls
CVE-2016-3591		 CWE-264 High
No
No
 - 30.11.-0001 SB2016091306


Showing elements 1 - 20 out of 29