Known vulnerabilities in Microsoft Exchange Server - page 3

Vendor: Microsoft
Software CPE: cpe:2.3:a:microsoft:microsoft_exchange_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 225
Public exploits: 37
Known exploited (KEV): 20
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft Exchange Server Microsoft Exchange Server is affected by 225 known vulnerabilities: 8 critical, 47 high, 107 medium, 63 low Critical High Medium Low

Vulnerabilities (225)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU87349 - Uncontrolled Search Path Element
CVE-2024-26198
CWE-427 High
No
No
2016 CU23 Mar24SU 15.01.2507.037, 2019 CU13 Mar24SU 15.02.1258.032, 2019 CU14 Mar24SU 15.02.1544.009 12.03.2024 SB20240312298
#VU86404 - Exposure of resource to wrong sphere
CVE-2024-21410
CWE-668 Critical
No
Exploited
2019 CU14 2024H1 15.02.1544.004 13.02.2024 SB2024021336
#VU83069 - Deserialization of Untrusted Data
CVE-2023-36050
CWE-502 Medium
No
No
2016 CU23 Nov23SU 15.01.2507.035, 2019 CU12 Nov23SU 15.02.1118.040, 2019 CU13 Nov23SU 15.02.1258.028 14.11.2023 SB2023111454
#VU83067 - Exposure of sensitive information to an unauthorized actor
CVE-2023-36035
CWE-200 Medium
No
No
2016 CU23 Nov23SU 15.01.2507.035, 2019 CU12 Nov23SU 15.02.1118.040, 2019 CU13 Nov23SU 15.02.1258.028 14.11.2023 SB2023111454
#VU83066 - Deserialization of Untrusted Data
CVE-2023-36039
CWE-502 Medium
No
No
2016 CU23 Nov23SU 15.01.2507.035, 2019 CU12 Nov23SU 15.02.1118.040, 2019 CU13 Nov23SU 15.02.1258.028 14.11.2023 SB2023111454
#VU83064 - Deserialization of Untrusted Data
CVE-2023-36439
CWE-502 Medium
No
No
2016 CU23 Nov23SU 15.01.2507.035, 2019 CU12 Nov23SU 15.02.1118.040, 2019 CU13 Nov23SU 15.02.1258.028 14.11.2023 SB2023111454
#VU82692 - Deserialization of Untrusted Data
CWE-502 High
No
No
- 02.11.2023 SB2023110257
#VU82691 - Server-Side Request Forgery (SSRF)
CWE-918 Medium
No
No
- 02.11.2023 SB2023110256
#VU81831 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-36778
CWE-78 Medium
No
No
2016 CU23 Oct23SU 15.01.2507.034, 2019 CU12 Oct23SU 15.02.1118.039, 2019 CU13 Oct23SU 15.02.1258.027 10.10.2023 SB2023101094
#VU80673 - Deserialization of Untrusted Data
CVE-2023-36745
CWE-502 Medium
Available
No
2016 CU23 Aug23SUv2 15.01.2507.032, 2019 CU12 Sep23SU 15.02.1118.037, 2019 CU13 Aug23SUv2 15.02.1258.025 12.09.2023 SB2023091254
#VU80672 - Deserialization of Untrusted Data
CVE-2023-36756
CWE-502 Medium
No
No
2016 CU23 Aug23SUv2 15.01.2507.032, 2019 CU12 Sep23SU 15.02.1118.037, 2019 CU13 Aug23SUv2 15.02.1258.025 12.09.2023 SB2023091254
#VU80670 - Improper Authentication
CVE-2023-36757
CWE-287 Medium
No
No
2016 CU23 Aug23SUv2 15.01.2507.032, 2019 CU12 Sep23SU 15.02.1118.037, 2019 CU13 Aug23SUv2 15.02.1258.025 12.09.2023 SB2023091254
#VU80668 - Exposure of sensitive information to an unauthorized actor
CVE-2023-36777
CWE-200 Medium
No
No
2016 CU23 Aug23SUv2 15.01.2507.032, 2019 CU12 Sep23SU 15.02.1118.037, 2019 CU13 Aug23SUv2 15.02.1258.025 12.09.2023 SB2023091254
#VU80667 - Deserialization of Untrusted Data
CVE-2023-36744
CWE-502 Medium
No
No
2016 CU23 Aug23SUv2 15.01.2507.032, 2019 CU12 Sep23SU 15.02.1118.037, 2019 CU13 Aug23SUv2 15.02.1258.025 12.09.2023 SB2023091254
#VU79166 - Improper input validation
CVE-2023-35368
CWE-20 High
No
No
2016 CU23 Aug23SU 15.01.2507.031, 2019 CU12 Aug23SU 15.02.1118.036, 2019 CU13 Aug23SU 15.02.1258.023 08.08.2023 SB2023080872
#VU79151 - Improper input validation
CVE-2023-35388
CWE-20 Medium
No
No
2016 CU23 Aug23SU 15.01.2507.031, 2019 CU12 Aug23SU 15.02.1118.036, 2019 CU13 Aug23SU 15.02.1258.023 08.08.2023 SB2023080867
#VU79150 - Improper input validation
CVE-2023-38182
CWE-20 Medium
No
No
2016 CU23 Aug23SU 15.01.2507.031, 2019 CU12 Aug23SU 15.02.1118.036, 2019 CU13 Aug23SU 15.02.1258.023 08.08.2023 SB2023080867
#VU79149 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2023-38181
CWE-451 Medium
No
No
2016 CU23 Aug23SU 15.01.2507.031, 2019 CU12 Aug23SU 15.02.1118.036, 2019 CU13 Aug23SU 15.02.1258.023 08.08.2023 SB2023080867
#VU79147 - Improper input validation
CVE-2023-38185
CWE-20 Medium
No
No
2016 CU23 Aug23SU 15.01.2507.031, 2019 CU12 Aug23SU 15.02.1118.036, 2019 CU13 Aug23SU 15.02.1258.023 08.08.2023 SB2023080867
#VU79146 - Permissions, Privileges, and Access Controls
CVE-2023-21709
CWE-264 High
No
No
2016 CU23 Aug23SU 15.01.2507.031, 2019 CU12 Aug23SU 15.02.1118.036, 2019 CU13 Aug23SU 15.02.1258.023 08.08.2023 SB2023080867


Showing elements 41 - 60 out of 225