Known vulnerabilities in Microsoft Exchange Server - page 10

Vendor: Microsoft
Software: Microsoft Exchange Server
Software CPE: cpe:2.3:a:microsoft:microsoft_exchange_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 225
Public exploits: 37
Known exploited (KEV): 20
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft Exchange Server Microsoft Exchange Server is affected by 225 known vulnerabilities: 8 critical, 47 high, 107 medium, 63 low Critical High Medium Low

Vulnerabilities (225)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU12455 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-8153		 CWE-79 Low
No
No
 - 08.05.2018 SB2018050812
#VU12454 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-8152		 CWE-79 Low
No
No
 - 08.05.2018 SB2018050812
#VU12453 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-8159		 CWE-79 Low
No
No
 - 08.05.2018 SB2018050812
#VU11501 - Memory corruption
CVE-2018-0986		 CWE-119 High
No
No
 - 03.04.2018 SB2018040403
#VU11001 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2018-0924		 CWE-601 Low
No
No
 - 13.03.2018 SB2018031309
#VU11003 - Exposure of sensitive information to an unauthorized actor
CVE-2018-0941		 CWE-200 Low
No
No
 - 13.03.2018 SB2018031309
#VU11007 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-0940		 CWE-79 Medium
No
No
 - 13.03.2018 SB2018031309
#VU9641 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2017-11932		 CWE-451 Low
No
No
 - 12.12.2017 SB2017121210
#VU9598 - Memory corruption
CVE-2017-11940		 CWE-119 High
No
No
 - 08.12.2017 SB2017120701
#VU9547 - Memory corruption
CVE-2017-11937		 CWE-119 High
No
No
 - 07.12.2017 SB2017120701
#VU8288 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-8758		 CWE-79 Low
No
No
 - 12.09.2017 SB2017091214
#VU8291 - Exposure of sensitive information to an unauthorized actor
CVE-2017-11761		 CWE-200 Low
No
No
 - 12.09.2017 SB2017091214
#VU7454 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2017-8621		 CWE-601 Low
No
No
 - 11.07.2017 SB2017071121
#VU7455 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-8560		 CWE-79 Low
No
No
 - 11.07.2017 SB2017071121
#VU7456 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-8559		 CWE-79 Low
No
No
 - 11.07.2017 SB2017071121
#VU6800 - Improper input validation
CVE-2017-8539		 CWE-20 Medium
No
No
 - 30.05.2017 SB2017053002
#VU6799 - Memory corruption
CVE-2017-8538		 CWE-119 High
Available
No
 - 30.05.2017 SB2017053002
#VU6797 - Improper input validation
CVE-2017-8537		 CWE-20 Medium
Available
No
 - 30.05.2017 SB2017053002
#VU6796 - Improper input validation
CVE-2017-8536		 CWE-20 Medium
Available
No
 - 30.05.2017 SB2017053002
#VU6795 - Improper input validation
CVE-2017-8535		 CWE-20 Medium
Available
No
 - 26.05.2017 SB2017053002


Showing elements 181 - 200 out of 225