Known vulnerabilities in Microsoft Exchange Server - page 3

Vendor: Microsoft
Software CPE: cpe:2.3:a:microsoft:microsoft_exchange_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 216
Public exploits: 36
Known exploited (KEV): 20
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft Exchange Server Microsoft Exchange Server is affected by 216 known vulnerabilities: 8 critical, 46 high, 102 medium, 60 low Critical High Medium Low

Vulnerabilities (216)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU80673 - Deserialization of Untrusted Data
CVE-2023-36745
CWE-502 Medium
Available
No
2016 CU23 Aug23SUv2 15.01.2507.032, 2019 CU12 Sep23SU 15.02.1118.037, 2019 CU13 Aug23SUv2 15.02.1258.025 12.09.2023 SB2023091254
#VU80672 - Deserialization of Untrusted Data
CVE-2023-36756
CWE-502 Medium
No
No
2016 CU23 Aug23SUv2 15.01.2507.032, 2019 CU12 Sep23SU 15.02.1118.037, 2019 CU13 Aug23SUv2 15.02.1258.025 12.09.2023 SB2023091254
#VU80670 - Improper Authentication
CVE-2023-36757
CWE-287 Medium
No
No
2016 CU23 Aug23SUv2 15.01.2507.032, 2019 CU12 Sep23SU 15.02.1118.037, 2019 CU13 Aug23SUv2 15.02.1258.025 12.09.2023 SB2023091254
#VU80668 - Exposure of sensitive information to an unauthorized actor
CVE-2023-36777
CWE-200 Medium
No
No
2016 CU23 Aug23SUv2 15.01.2507.032, 2019 CU12 Sep23SU 15.02.1118.037, 2019 CU13 Aug23SUv2 15.02.1258.025 12.09.2023 SB2023091254
#VU80667 - Deserialization of Untrusted Data
CVE-2023-36744
CWE-502 Medium
No
No
2016 CU23 Aug23SUv2 15.01.2507.032, 2019 CU12 Sep23SU 15.02.1118.037, 2019 CU13 Aug23SUv2 15.02.1258.025 12.09.2023 SB2023091254
#VU79166 - Improper input validation
CVE-2023-35368
CWE-20 High
No
No
2016 CU23 Aug23SU 15.01.2507.031, 2019 CU12 Aug23SU 15.02.1118.036, 2019 CU13 Aug23SU 15.02.1258.023 08.08.2023 SB2023080872
#VU79151 - Improper input validation
CVE-2023-35388
CWE-20 Medium
No
No
2016 CU23 Aug23SU 15.01.2507.031, 2019 CU12 Aug23SU 15.02.1118.036, 2019 CU13 Aug23SU 15.02.1258.023 08.08.2023 SB2023080867
#VU79150 - Improper input validation
CVE-2023-38182
CWE-20 Medium
No
No
2016 CU23 Aug23SU 15.01.2507.031, 2019 CU12 Aug23SU 15.02.1118.036, 2019 CU13 Aug23SU 15.02.1258.023 08.08.2023 SB2023080867
#VU79149 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2023-38181
CWE-451 Medium
No
No
2016 CU23 Aug23SU 15.01.2507.031, 2019 CU12 Aug23SU 15.02.1118.036, 2019 CU13 Aug23SU 15.02.1258.023 08.08.2023 SB2023080867
#VU79147 - Improper input validation
CVE-2023-38185
CWE-20 Medium
No
No
2016 CU23 Aug23SU 15.01.2507.031, 2019 CU12 Aug23SU 15.02.1118.036, 2019 CU13 Aug23SU 15.02.1258.023 08.08.2023 SB2023080867
#VU79146 - Permissions, Privileges, and Access Controls
CVE-2023-21709
CWE-264 High
No
No
2016 CU23 Aug23SU 15.01.2507.031, 2019 CU12 Aug23SU 15.02.1118.036, 2019 CU13 Aug23SU 15.02.1258.023 08.08.2023 SB2023080867
#VU77240 - Deserialization of Untrusted Data
CVE-2023-32031
CWE-502 High
Available
No
2016 CU23 Jun23SU 15.01.2507.027, 2019 CU12 Jun23SU 15.02.1118.030, 2019 CU13 Jun23SU 15.02.1258.016 13.06.2023 SB2023061355
#VU77238 - Improper input validation
CVE-2023-28310
CWE-20 Medium
No
No
2016 CU23 Jun23SU 15.01.2507.027, 2019 CU12 Jun23SU 15.02.1118.030, 2019 CU13 Jun23SU 15.02.1258.016 13.06.2023 SB2023061355
#VU72174 - Exposed Dangerous Method or Function
CVE-2023-21529
CWE-749 High
No
Exploited
2013 CU23 Feb23SU 15.00.1497.047, 2016 CU23 Feb23SU 15.01.2507.021, 2019 CU11 Feb23SU 15.02.0986.041, 2019 CU12 Feb23SU 15.02.1118.025 14.02.2023 SB2023021424
#VU72173 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-21707
CWE-94 High
Available
No
2013 CU23 Feb23SU 15.00.1497.047, 2016 CU23 Feb23SU 15.01.2507.021, 2019 CU11 Feb23SU 15.02.0986.041, 2019 CU12 Feb23SU 15.02.1118.025 14.02.2023 SB2023021424
#VU72172 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-21706
CWE-94 High
No
No
2013 CU23 Feb23SU 15.00.1497.047, 2016 CU23 Feb23SU 15.01.2507.021, 2019 CU11 Feb23SU 15.02.0986.041, 2019 CU12 Feb23SU 15.02.1118.025 14.02.2023 SB2023021424
#VU72171 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-21710
CWE-94 Medium
No
No
2013 CU23 Feb23SU 15.00.1497.047, 2016 CU23 Feb23SU 15.01.2507.021, 2019 CU11 Feb23SU 15.02.0986.041, 2019 CU12 Feb23SU 15.02.1118.025 14.02.2023 SB2023021424
#VU70915 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2023-21745
CWE-300 Medium
No
No
2016 CU23 Jan23SU 15.01.2507.017, 2019 CU11 Jan23SU 15.02.0986.037, 2019 CU12 Jan23SU 15.02.1118.021 10.01.2023 SB2023011045
#VU70913 - Exposure of sensitive information to an unauthorized actor
CVE-2023-21761
CWE-200 Medium
No
No
2016 CU23 Jan23SU 15.01.2507.017, 2019 CU11 Jan23SU 15.02.0986.037, 2019 CU12 Jan23SU 15.02.1118.021 10.01.2023 SB2023011045
#VU70912 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2023-21762
CWE-300 Medium
No
No
2013 CU23 Jan23SU 15.00.1497.045, 2016 CU23 Jan23SU 15.01.2507.017, 2019 CU11 Jan23SU 15.02.0986.037, 2019 CU12 Jan23SU 15.02.1118.021 10.01.2023 SB2023011045


Showing elements 41 - 60 out of 216