Known vulnerabilities in Microsoft Exchange Server - page 4

Vendor: Microsoft
Software CPE: cpe:2.3:a:microsoft:microsoft_exchange_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 216
Public exploits: 36
Known exploited (KEV): 20
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft Exchange Server Microsoft Exchange Server is affected by 216 known vulnerabilities: 8 critical, 46 high, 102 medium, 60 low Critical High Medium Low

Vulnerabilities (216)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU70910 - Permissions, Privileges, and Access Controls
CVE-2023-21763
CWE-264 Low
No
No
2016 CU23 Jan23SU 15.01.2507.017, 2019 CU11 Jan23SU 15.02.0986.037, 2019 CU12 Jan23SU 15.02.1118.021 10.01.2023 SB2023011045
#VU70909 - Permissions, Privileges, and Access Controls
CVE-2023-21764
CWE-264 Low
No
No
2016 CU23 Jan23SU 15.01.2507.017, 2019 CU11 Jan23SU 15.02.0986.037, 2019 CU12 Jan23SU 15.02.1118.021 10.01.2023 SB2023011045
#VU69097 - Permissions, Privileges, and Access Controls
CVE-2022-41080
CWE-264 High
No
Exploited
2013 CU23 Nov22SU 15.00.1497.044, 2016 CU22 Nov22SU 15.01.2375.037, 2016 CU23 Nov22SU 15.01.2507.016, 2019 CU11 Nov22SU 15.02.0986.036, 2019 CU12 Nov22SU 15.02.1118.020 08.11.2022 SB2022110823
#VU69096 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2022-41079
CWE-451 Medium
No
No
2013 CU23 Nov22SU 15.00.1497.044, 2016 CU22 Nov22SU 15.01.2375.037, 2016 CU23 Nov22SU 15.01.2507.016, 2019 CU11 Nov22SU 15.02.0986.036, 2019 CU12 Nov22SU 15.02.1118.020 08.11.2022 SB2022110823
#VU69095 - Permissions, Privileges, and Access Controls
CVE-2022-41123
CWE-264 Low
No
No
2016 CU22 Nov22SU 15.01.2375.037, 2016 CU23 Nov22SU 15.01.2507.016, 2019 CU11 Nov22SU 15.02.0986.036, 2019 CU12 Nov22SU 15.02.1118.020 08.11.2022 SB2022110823
#VU69093 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2022-41078
CWE-451 Medium
No
No
2013 CU23 Nov22SU 15.00.1497.044, 2016 CU22 Nov22SU 15.01.2375.037, 2016 CU23 Nov22SU 15.01.2507.016, 2019 CU11 Nov22SU 15.02.0986.036, 2019 CU12 Nov22SU 15.02.1118.020 08.11.2022 SB2022110823
#VU67770 - Server-Side Request Forgery (SSRF)
CVE-2022-41040
CWE-918 Critical
Available
Exploited
2013 CU23 Nov22SU 15.00.1497.044, 2016 CU22 Nov22SU 15.01.2375.037, 2016 CU23 Nov22SU 15.01.2507.016, 2019 CU11 Nov22SU 15.02.0986.036, 2019 CU12 Nov22SU 15.02.1118.020 30.09.2022 SB2022093001
#VU67764 - Deserialization of Untrusted Data
CVE-2022-41082
CWE-502 Critical
Available
Exploited
2013 CU23 Nov22SU 15.00.1497.044, 2016 CU22 Nov22SU 15.01.2375.037, 2016 CU23 Nov22SU 15.01.2507.016, 2019 CU11 Nov22SU 15.02.0986.036, 2019 CU12 Nov22SU 15.02.1118.020 30.09.2022 SB2022093001
#VU66325 - Exposure of sensitive information to an unauthorized actor
CVE-2022-34692
CWE-200 Medium
No
No
2016 Cumulative Update 22 Aug22SU 15.01.2375.031, 2016 Cumulative Update 23 Aug22SU 15.01.2507.012, 2019 Cumulative Update 11 Aug22SU 15.02.0986.029, 2019 Cumulative Update 12 Aug22SU 15.02.1118.012 09.08.2022 SB2022080960
#VU66301 - Improper Access Control
CVE-2022-30134
CWE-284 Medium
No
No
2013 Cumulative Update 23 Aug22SU 15.00.1497.040, 2016 Cumulative Update 22 Aug22SU 15.01.2375.031, 2016 Cumulative Update 23 Aug22SU 15.01.2507.012, 2019 Cumulative Update 11 Aug22SU 15.02.0986.029, 2019 Cumulative Update 12 Aug22SU 15.02.1118.012 09.08.2022 SB2022080933
#VU66300 - Permissions, Privileges, and Access Controls
CVE-2022-24477
CWE-264 Medium
No
No
2013 Cumulative Update 23 Aug22SU 15.00.1497.040, 2016 Cumulative Update 22 Aug22SU 15.01.2375.031, 2016 Cumulative Update 23 Aug22SU 15.01.2507.012, 2019 Cumulative Update 11 Aug22SU 15.02.0986.029, 2019 Cumulative Update 12 Aug22SU 15.02.1118.012 09.08.2022 SB2022080933
#VU66297 - Permissions, Privileges, and Access Controls
CVE-2022-24516
CWE-264 Medium
No
No
2013 Cumulative Update 23 Aug22SU 15.00.1497.040, 2016 Cumulative Update 22 Aug22SU 15.01.2375.031, 2016 Cumulative Update 23 Aug22SU 15.01.2507.012, 2019 Cumulative Update 11 Aug22SU 15.02.0986.029, 2019 Cumulative Update 12 Aug22SU 15.02.1118.012 09.08.2022 SB2022080933
#VU66292 - Permissions, Privileges, and Access Controls
CVE-2022-21980
CWE-264 Medium
No
No
2013 Cumulative Update 23 Aug22SU 15.00.1497.040, 2016 Cumulative Update 22 Aug22SU 15.01.2375.031, 2016 Cumulative Update 23 Aug22SU 15.01.2507.012, 2019 Cumulative Update 11 Aug22SU 15.02.0986.029, 2019 Cumulative Update 12 Aug22SU 15.02.1118.012 09.08.2022 SB2022080933
#VU66288 - Improper Access Control
CVE-2022-21979
CWE-284 Medium
No
No
2013 Cumulative Update 23 Aug22SU 15.00.1497.040, 2016 Cumulative Update 22 Aug22SU 15.01.2375.031, 2016 Cumulative Update 23 Aug22SU 15.01.2507.012, 2019 Cumulative Update 11 Aug22SU 15.02.0986.029, 2019 Cumulative Update 12 Aug22SU 15.02.1118.012 09.08.2022 SB2022080933
#VU62993 - Permissions, Privileges, and Access Controls
CVE-2022-21978
CWE-264 Low
No
No
- 11.05.2022 SB2022051106
#VU61125 - Exposure of sensitive information to an unauthorized actor
CVE-2022-24463
CWE-200 Medium
No
No
- 08.03.2022 SB2022030818
#VU61124 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-23277
CWE-94 High
Available
No
- 08.03.2022 SB2022030818
#VU59411 - Improper input validation
CVE-2022-21855
CWE-20 Medium
No
No
- 11.01.2022 SB2022011125
#VU59410 - Improper input validation
CVE-2022-21969
CWE-20 Medium
No
No
- 11.01.2022 SB2022011125
#VU59409 - Improper input validation
CVE-2022-21846
CWE-20 Medium
No
No
- 11.01.2022 SB2022011125


Showing elements 61 - 80 out of 216