Known vulnerabilities in Microsoft Exchange Server - page 4

Vendor: Microsoft
Software CPE: cpe:2.3:a:microsoft:microsoft_exchange_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 225
Public exploits: 37
Known exploited (KEV): 20
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft Exchange Server Microsoft Exchange Server is affected by 225 known vulnerabilities: 8 critical, 47 high, 107 medium, 63 low Critical High Medium Low

Vulnerabilities (225)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU77240 - Deserialization of Untrusted Data
CVE-2023-32031
CWE-502 High
Available
No
2016 CU23 Jun23SU 15.01.2507.027, 2019 CU12 Jun23SU 15.02.1118.030, 2019 CU13 Jun23SU 15.02.1258.016 13.06.2023 SB2023061355
#VU77238 - Improper input validation
CVE-2023-28310
CWE-20 Medium
No
No
2016 CU23 Jun23SU 15.01.2507.027, 2019 CU12 Jun23SU 15.02.1118.030, 2019 CU13 Jun23SU 15.02.1258.016 13.06.2023 SB2023061355
#VU72174 - Exposed Dangerous Method or Function
CVE-2023-21529
CWE-749 High
No
Exploited
2013 CU23 Feb23SU 15.00.1497.047, 2016 CU23 Feb23SU 15.01.2507.021, 2019 CU11 Feb23SU 15.02.0986.041, 2019 CU12 Feb23SU 15.02.1118.025 14.02.2023 SB2023021424
#VU72173 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-21707
CWE-94 High
Available
No
2013 CU23 Feb23SU 15.00.1497.047, 2016 CU23 Feb23SU 15.01.2507.021, 2019 CU11 Feb23SU 15.02.0986.041, 2019 CU12 Feb23SU 15.02.1118.025 14.02.2023 SB2023021424
#VU72172 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-21706
CWE-94 High
No
No
2013 CU23 Feb23SU 15.00.1497.047, 2016 CU23 Feb23SU 15.01.2507.021, 2019 CU11 Feb23SU 15.02.0986.041, 2019 CU12 Feb23SU 15.02.1118.025 14.02.2023 SB2023021424
#VU72171 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-21710
CWE-94 Medium
No
No
2013 CU23 Feb23SU 15.00.1497.047, 2016 CU23 Feb23SU 15.01.2507.021, 2019 CU11 Feb23SU 15.02.0986.041, 2019 CU12 Feb23SU 15.02.1118.025 14.02.2023 SB2023021424
#VU70915 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2023-21745
CWE-300 Medium
No
No
2016 CU23 Jan23SU 15.01.2507.017, 2019 CU11 Jan23SU 15.02.0986.037, 2019 CU12 Jan23SU 15.02.1118.021 10.01.2023 SB2023011045
#VU70913 - Exposure of sensitive information to an unauthorized actor
CVE-2023-21761
CWE-200 Medium
No
No
2016 CU23 Jan23SU 15.01.2507.017, 2019 CU11 Jan23SU 15.02.0986.037, 2019 CU12 Jan23SU 15.02.1118.021 10.01.2023 SB2023011045
#VU70912 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2023-21762
CWE-300 Medium
No
No
2013 CU23 Jan23SU 15.00.1497.045, 2016 CU23 Jan23SU 15.01.2507.017, 2019 CU11 Jan23SU 15.02.0986.037, 2019 CU12 Jan23SU 15.02.1118.021 10.01.2023 SB2023011045
#VU70910 - Permissions, Privileges, and Access Controls
CVE-2023-21763
CWE-264 Low
No
No
2016 CU23 Jan23SU 15.01.2507.017, 2019 CU11 Jan23SU 15.02.0986.037, 2019 CU12 Jan23SU 15.02.1118.021 10.01.2023 SB2023011045
#VU70909 - Permissions, Privileges, and Access Controls
CVE-2023-21764
CWE-264 Low
No
No
2016 CU23 Jan23SU 15.01.2507.017, 2019 CU11 Jan23SU 15.02.0986.037, 2019 CU12 Jan23SU 15.02.1118.021 10.01.2023 SB2023011045
#VU69097 - Permissions, Privileges, and Access Controls
CVE-2022-41080
CWE-264 High
No
Exploited
2013 CU23 Nov22SU 15.00.1497.044, 2016 CU22 Nov22SU 15.01.2375.037, 2016 CU23 Nov22SU 15.01.2507.016, 2019 CU11 Nov22SU 15.02.0986.036, 2019 CU12 Nov22SU 15.02.1118.020 08.11.2022 SB2022110823
#VU69096 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2022-41079
CWE-451 Medium
No
No
2013 CU23 Nov22SU 15.00.1497.044, 2016 CU22 Nov22SU 15.01.2375.037, 2016 CU23 Nov22SU 15.01.2507.016, 2019 CU11 Nov22SU 15.02.0986.036, 2019 CU12 Nov22SU 15.02.1118.020 08.11.2022 SB2022110823
#VU69095 - Permissions, Privileges, and Access Controls
CVE-2022-41123
CWE-264 Low
No
No
2016 CU22 Nov22SU 15.01.2375.037, 2016 CU23 Nov22SU 15.01.2507.016, 2019 CU11 Nov22SU 15.02.0986.036, 2019 CU12 Nov22SU 15.02.1118.020 08.11.2022 SB2022110823
#VU69093 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2022-41078
CWE-451 Medium
No
No
2013 CU23 Nov22SU 15.00.1497.044, 2016 CU22 Nov22SU 15.01.2375.037, 2016 CU23 Nov22SU 15.01.2507.016, 2019 CU11 Nov22SU 15.02.0986.036, 2019 CU12 Nov22SU 15.02.1118.020 08.11.2022 SB2022110823
#VU67770 - Server-Side Request Forgery (SSRF)
CVE-2022-41040
CWE-918 Critical
Available
Exploited
2013 CU23 Nov22SU 15.00.1497.044, 2016 CU22 Nov22SU 15.01.2375.037, 2016 CU23 Nov22SU 15.01.2507.016, 2019 CU11 Nov22SU 15.02.0986.036, 2019 CU12 Nov22SU 15.02.1118.020 30.09.2022 SB2022093001
#VU67764 - Deserialization of Untrusted Data
CVE-2022-41082
CWE-502 Critical
Available
Exploited
2013 CU23 Nov22SU 15.00.1497.044, 2016 CU22 Nov22SU 15.01.2375.037, 2016 CU23 Nov22SU 15.01.2507.016, 2019 CU11 Nov22SU 15.02.0986.036, 2019 CU12 Nov22SU 15.02.1118.020 30.09.2022 SB2022093001
#VU66325 - Exposure of sensitive information to an unauthorized actor
CVE-2022-34692
CWE-200 Medium
No
No
2016 Cumulative Update 22 Aug22SU 15.01.2375.031, 2016 Cumulative Update 23 Aug22SU 15.01.2507.012, 2019 Cumulative Update 11 Aug22SU 15.02.0986.029, 2019 Cumulative Update 12 Aug22SU 15.02.1118.012 09.08.2022 SB2022080960
#VU66301 - Improper Access Control
CVE-2022-30134
CWE-284 Medium
No
No
2013 Cumulative Update 23 Aug22SU 15.00.1497.040, 2016 Cumulative Update 22 Aug22SU 15.01.2375.031, 2016 Cumulative Update 23 Aug22SU 15.01.2507.012, 2019 Cumulative Update 11 Aug22SU 15.02.0986.029, 2019 Cumulative Update 12 Aug22SU 15.02.1118.012 09.08.2022 SB2022080933
#VU66300 - Permissions, Privileges, and Access Controls
CVE-2022-24477
CWE-264 Medium
No
No
2013 Cumulative Update 23 Aug22SU 15.00.1497.040, 2016 Cumulative Update 22 Aug22SU 15.01.2375.031, 2016 Cumulative Update 23 Aug22SU 15.01.2507.012, 2019 Cumulative Update 11 Aug22SU 15.02.0986.029, 2019 Cumulative Update 12 Aug22SU 15.02.1118.012 09.08.2022 SB2022080933


Showing elements 61 - 80 out of 225