Known vulnerabilities in Microsoft Exchange Server - page 5

Vendor: Microsoft
Software CPE: cpe:2.3:a:microsoft:microsoft_exchange_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 225
Public exploits: 37
Known exploited (KEV): 20
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft Exchange Server Microsoft Exchange Server is affected by 225 known vulnerabilities: 8 critical, 47 high, 107 medium, 63 low Critical High Medium Low

Vulnerabilities (225)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU66297 - Permissions, Privileges, and Access Controls
CVE-2022-24516
CWE-264 Medium
No
No
2013 Cumulative Update 23 Aug22SU 15.00.1497.040, 2016 Cumulative Update 22 Aug22SU 15.01.2375.031, 2016 Cumulative Update 23 Aug22SU 15.01.2507.012, 2019 Cumulative Update 11 Aug22SU 15.02.0986.029, 2019 Cumulative Update 12 Aug22SU 15.02.1118.012 09.08.2022 SB2022080933
#VU66292 - Permissions, Privileges, and Access Controls
CVE-2022-21980
CWE-264 Medium
No
No
2013 Cumulative Update 23 Aug22SU 15.00.1497.040, 2016 Cumulative Update 22 Aug22SU 15.01.2375.031, 2016 Cumulative Update 23 Aug22SU 15.01.2507.012, 2019 Cumulative Update 11 Aug22SU 15.02.0986.029, 2019 Cumulative Update 12 Aug22SU 15.02.1118.012 09.08.2022 SB2022080933
#VU66288 - Improper Access Control
CVE-2022-21979
CWE-284 Medium
No
No
2013 Cumulative Update 23 Aug22SU 15.00.1497.040, 2016 Cumulative Update 22 Aug22SU 15.01.2375.031, 2016 Cumulative Update 23 Aug22SU 15.01.2507.012, 2019 Cumulative Update 11 Aug22SU 15.02.0986.029, 2019 Cumulative Update 12 Aug22SU 15.02.1118.012 09.08.2022 SB2022080933
#VU62993 - Permissions, Privileges, and Access Controls
CVE-2022-21978
CWE-264 Low
No
No
- 11.05.2022 SB2022051106
#VU61125 - Exposure of sensitive information to an unauthorized actor
CVE-2022-24463
CWE-200 Medium
No
No
- 08.03.2022 SB2022030818
#VU61124 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-23277
CWE-94 High
Available
No
- 08.03.2022 SB2022030818
#VU59411 - Improper input validation
CVE-2022-21855
CWE-20 Medium
No
No
- 11.01.2022 SB2022011125
#VU59410 - Improper input validation
CVE-2022-21969
CWE-20 Medium
No
No
- 11.01.2022 SB2022011125
#VU59409 - Improper input validation
CVE-2022-21846
CWE-20 Medium
No
No
- 11.01.2022 SB2022011125
#VU58069 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-42305
CWE-451 Medium
No
No
- 09.11.2021 SB2021110940
#VU58068 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-41349
CWE-451 Medium
Available
No
- 09.11.2021 SB2021110940
#VU58055 - Improper input validation
CVE-2021-42321
CWE-20 Critical
Available
Exploited
- 09.11.2021 SB2021110928
#VU57255 - Permissions, Privileges, and Access Controls
CVE-2021-26427
CWE-264 Medium
No
No
- 12.10.2021 SB2021101214
#VU57254 - Improper input validation
CVE-2021-34453
CWE-20 Medium
No
No
- 12.10.2021 SB2021101214
#VU57252 - Permissions, Privileges, and Access Controls
CVE-2021-41348
CWE-264 Medium
No
No
- 12.10.2021 SB2021101214
#VU57251 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-41350
CWE-79 Medium
No
No
- 12.10.2021 SB2021101214
#VU54766 - Improper Authentication
CVE-2021-33766
CWE-287 Medium
Available
Exploited
- 13.07.2021 SB2021071342
#VU54712 - Permissions, Privileges, and Access Controls
CVE-2021-34470
CWE-264 Low
No
No
- 13.07.2021 SB2021071319
#VU54709 - Permissions, Privileges, and Access Controls
CVE-2021-33768
CWE-264 Low
No
No
- 13.07.2021 SB2021071319
#VU54702 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-31196
CWE-94 Low
Available
Exploited
- 13.07.2021 SB2021071319


Showing elements 81 - 100 out of 225