Known vulnerabilities in Microsoft Exchange Server 2019 Cumulative Update 10 Jan22SU 15.02.0922.020 - page 3

Vendor: Microsoft
Version: 2019 Cumulative Update 10 Jan22SU 15.02.0922.020
Software CPE: cpe:2.3:a:microsoft:microsoft_exchange_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 56
Public exploits: 5
Known exploited (KEV): 6
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Microsoft Exchange Server version 2019 Cumulative Update 10 Jan22SU 15.02.0922.020 Microsoft Exchange Server 2019 Cumulative Update 10 Jan22SU 15.02.0922.020 is affected by 56 vulnerabilities: 3 critical, 10 high, 39 medium, 4 low Critical High Medium Low

Vulnerabilities (56)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU70913 - Exposure of sensitive information to an unauthorized actor
CVE-2023-21761
CWE-200 Medium
No
No
2016 CU23 Jan23SU 15.01.2507.017, 2019 CU11 Jan23SU 15.02.0986.037, 2019 CU12 Jan23SU 15.02.1118.021 10.01.2023 SB2023011045
#VU70912 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2023-21762
CWE-300 Medium
No
No
2013 CU23 Jan23SU 15.00.1497.045, 2016 CU23 Jan23SU 15.01.2507.017, 2019 CU11 Jan23SU 15.02.0986.037, 2019 CU12 Jan23SU 15.02.1118.021 10.01.2023 SB2023011045
#VU70910 - Permissions, Privileges, and Access Controls
CVE-2023-21763
CWE-264 Low
No
No
2016 CU23 Jan23SU 15.01.2507.017, 2019 CU11 Jan23SU 15.02.0986.037, 2019 CU12 Jan23SU 15.02.1118.021 10.01.2023 SB2023011045
#VU70909 - Permissions, Privileges, and Access Controls
CVE-2023-21764
CWE-264 Low
No
No
2016 CU23 Jan23SU 15.01.2507.017, 2019 CU11 Jan23SU 15.02.0986.037, 2019 CU12 Jan23SU 15.02.1118.021 10.01.2023 SB2023011045
#VU69097 - Permissions, Privileges, and Access Controls
CVE-2022-41080
CWE-264 High
No
Exploited
2013 CU23 Nov22SU 15.00.1497.044, 2016 CU22 Nov22SU 15.01.2375.037, 2016 CU23 Nov22SU 15.01.2507.016, 2019 CU11 Nov22SU 15.02.0986.036, 2019 CU12 Nov22SU 15.02.1118.020 08.11.2022 SB2022110823
#VU69096 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2022-41079
CWE-451 Medium
No
No
2013 CU23 Nov22SU 15.00.1497.044, 2016 CU22 Nov22SU 15.01.2375.037, 2016 CU23 Nov22SU 15.01.2507.016, 2019 CU11 Nov22SU 15.02.0986.036, 2019 CU12 Nov22SU 15.02.1118.020 08.11.2022 SB2022110823
#VU69095 - Permissions, Privileges, and Access Controls
CVE-2022-41123
CWE-264 Low
No
No
2016 CU22 Nov22SU 15.01.2375.037, 2016 CU23 Nov22SU 15.01.2507.016, 2019 CU11 Nov22SU 15.02.0986.036, 2019 CU12 Nov22SU 15.02.1118.020 08.11.2022 SB2022110823
#VU69093 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2022-41078
CWE-451 Medium
No
No
2013 CU23 Nov22SU 15.00.1497.044, 2016 CU22 Nov22SU 15.01.2375.037, 2016 CU23 Nov22SU 15.01.2507.016, 2019 CU11 Nov22SU 15.02.0986.036, 2019 CU12 Nov22SU 15.02.1118.020 08.11.2022 SB2022110823
#VU67770 - Server-Side Request Forgery (SSRF)
CVE-2022-41040
CWE-918 Critical
Public exploit available
Exploited
2013 CU23 Nov22SU 15.00.1497.044, 2016 CU22 Nov22SU 15.01.2375.037, 2016 CU23 Nov22SU 15.01.2507.016, 2019 CU11 Nov22SU 15.02.0986.036, 2019 CU12 Nov22SU 15.02.1118.020 30.09.2022 SB2022093001
#VU67764 - Deserialization of Untrusted Data
CVE-2022-41082
CWE-502 Critical
Public exploit available
Exploited
2013 CU23 Nov22SU 15.00.1497.044, 2016 CU22 Nov22SU 15.01.2375.037, 2016 CU23 Nov22SU 15.01.2507.016, 2019 CU11 Nov22SU 15.02.0986.036, 2019 CU12 Nov22SU 15.02.1118.020 30.09.2022 SB2022093001
#VU66325 - Exposure of sensitive information to an unauthorized actor
CVE-2022-34692
CWE-200 Medium
No
No
2016 Cumulative Update 22 Aug22SU 15.01.2375.031, 2016 Cumulative Update 23 Aug22SU 15.01.2507.012, 2019 Cumulative Update 11 Aug22SU 15.02.0986.029, 2019 Cumulative Update 12 Aug22SU 15.02.1118.012 09.08.2022 SB2022080960
#VU66301 - Improper Access Control
CVE-2022-30134
CWE-284 Medium
No
No
2013 Cumulative Update 23 Aug22SU 15.00.1497.040, 2016 Cumulative Update 22 Aug22SU 15.01.2375.031, 2016 Cumulative Update 23 Aug22SU 15.01.2507.012, 2019 Cumulative Update 11 Aug22SU 15.02.0986.029, 2019 Cumulative Update 12 Aug22SU 15.02.1118.012 09.08.2022 SB2022080933
#VU66300 - Permissions, Privileges, and Access Controls
CVE-2022-24477
CWE-264 Medium
No
No
2013 Cumulative Update 23 Aug22SU 15.00.1497.040, 2016 Cumulative Update 22 Aug22SU 15.01.2375.031, 2016 Cumulative Update 23 Aug22SU 15.01.2507.012, 2019 Cumulative Update 11 Aug22SU 15.02.0986.029, 2019 Cumulative Update 12 Aug22SU 15.02.1118.012 09.08.2022 SB2022080933
#VU66297 - Permissions, Privileges, and Access Controls
CVE-2022-24516
CWE-264 Medium
No
No
2013 Cumulative Update 23 Aug22SU 15.00.1497.040, 2016 Cumulative Update 22 Aug22SU 15.01.2375.031, 2016 Cumulative Update 23 Aug22SU 15.01.2507.012, 2019 Cumulative Update 11 Aug22SU 15.02.0986.029, 2019 Cumulative Update 12 Aug22SU 15.02.1118.012 09.08.2022 SB2022080933
#VU66292 - Permissions, Privileges, and Access Controls
CVE-2022-21980
CWE-264 Medium
No
No
2013 Cumulative Update 23 Aug22SU 15.00.1497.040, 2016 Cumulative Update 22 Aug22SU 15.01.2375.031, 2016 Cumulative Update 23 Aug22SU 15.01.2507.012, 2019 Cumulative Update 11 Aug22SU 15.02.0986.029, 2019 Cumulative Update 12 Aug22SU 15.02.1118.012 09.08.2022 SB2022080933
#VU66288 - Improper Access Control
CVE-2022-21979
CWE-284 Medium
No
No
2013 Cumulative Update 23 Aug22SU 15.00.1497.040, 2016 Cumulative Update 22 Aug22SU 15.01.2375.031, 2016 Cumulative Update 23 Aug22SU 15.01.2507.012, 2019 Cumulative Update 11 Aug22SU 15.02.0986.029, 2019 Cumulative Update 12 Aug22SU 15.02.1118.012 09.08.2022 SB2022080933


Showing elements 41 - 60 out of 56