Known vulnerabilities in Microsoft Exchange Server 2016 CU23 Aug26SU 15.01.2507.072

Vendor: Microsoft
Version: 2016 CU23 Aug26SU 15.01.2507.072
Software CPE: cpe:2.3:a:microsoft:microsoft_exchange_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 2
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Microsoft Exchange Server version 2016 CU23 Aug26SU 15.01.2507.072 Microsoft Exchange Server 2016 CU23 Aug26SU 15.01.2507.072 is affected by 2 vulnerabilities: 2 medium Critical High Medium Low

Vulnerabilities (2)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU147644 - Missing Authorization
CVE-2026-69380
CWE-862 Medium
No
No
SE RTM Sep26SU 15.02.2562.049, 2016 CU23 Sep26SU 15.01.2507.073, 2019 CU14 Sep26SU 15.02.1544.046, 2019 CU15 Sep26SU 15.02.1748.051 08.09.2026 SB2026090908
#VU147622 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-69356
CWE-79 Medium
No
No
SE RTM Sep26SU 15.02.2562.049, 2016 CU23 Sep26SU 15.01.2507.073, 2019 CU14 Sep26SU 15.02.1544.046, 2019 CU15 Sep26SU 15.02.1748.051 08.09.2026 SB2026090908