Known vulnerabilities in Microsoft Exchange Server - page 10

Vendor: Microsoft
Software: Microsoft Exchange Server
Software CPE: cpe:2.3:a:microsoft:microsoft_exchange_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 216
Public exploits: 36
Known exploited (KEV): 20
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft Exchange Server Microsoft Exchange Server is affected by 216 known vulnerabilities: 8 critical, 46 high, 102 medium, 60 low Critical High Medium Low

Vulnerabilities (216)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU9598 - Memory corruption
CVE-2017-11940		 CWE-119 High
No
No
 - 08.12.2017 SB2017120701
#VU8288 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-8758		 CWE-79 Low
No
No
 - 12.09.2017 SB2017091214
#VU8291 - Exposure of sensitive information to an unauthorized actor
CVE-2017-11761		 CWE-200 Low
No
No
 - 12.09.2017 SB2017091214
#VU7454 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2017-8621		 CWE-601 Low
No
No
 - 11.07.2017 SB2017071121
#VU7455 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-8560		 CWE-79 Low
No
No
 - 11.07.2017 SB2017071121
#VU7456 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-8559		 CWE-79 Low
No
No
 - 11.07.2017 SB2017071121
#VU6803 - Improper input validation
CVE-2017-8542		 CWE-20 Medium
No
No
 - 30.05.2017 SB2017053002
#VU6802 - Memory corruption
CVE-2017-8541		 CWE-119 High
Available
No
 - 30.05.2017 SB2017053002
#VU6801 - Memory corruption
CVE-2017-8540		 CWE-119 High
Available
Exploited
 - 30.05.2017 SB2017053002
#VU6800 - Improper input validation
CVE-2017-8539		 CWE-20 Medium
No
No
 - 30.05.2017 SB2017053002
#VU6799 - Memory corruption
CVE-2017-8538		 CWE-119 High
Available
No
 - 30.05.2017 SB2017053002
#VU6797 - Improper input validation
CVE-2017-8537		 CWE-20 Medium
Available
No
 - 30.05.2017 SB2017053002
#VU6796 - Improper input validation
CVE-2017-8536		 CWE-20 Medium
Available
No
 - 30.05.2017 SB2017053002
#VU6795 - Improper input validation
CVE-2017-8535		 CWE-20 Medium
Available
No
 - 26.05.2017 SB2017053002
#VU5994 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-0110		 CWE-79 Low
No
No
 - 14.03.2017 SB2017031414
SB20170314147
#VU2625 - Permissions, Privileges, and Access Controls
CVE-2016-3575		 CWE-264 High
No
No
 - 30.11.-0001 SB2016091306
#VU2631 - Permissions, Privileges, and Access Controls
CVE-2016-3581		 CWE-264 High
No
No
 - 30.11.-0001 SB2016091306
#VU2632 - Permissions, Privileges, and Access Controls
CVE-2016-3582		 CWE-264 High
No
No
 - 30.11.-0001 SB2016091306
#VU2633 - Permissions, Privileges, and Access Controls
CVE-2016-3583		 CWE-264 High
No
No
 - 30.11.-0001 SB2016091306
#VU2639 - Permissions, Privileges, and Access Controls
CVE-2016-3595		 CWE-264 High
No
No
 - 30.11.-0001 SB2016091306


Showing elements 181 - 200 out of 216