Known vulnerabilities in Microsoft Exchange Server - page 6

Vendor: Microsoft
Software CPE: cpe:2.3:a:microsoft:microsoft_exchange_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 225
Public exploits: 37
Known exploited (KEV): 20
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft Exchange Server Microsoft Exchange Server is affected by 225 known vulnerabilities: 8 critical, 47 high, 107 medium, 63 low Critical High Medium Low

Vulnerabilities (225)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU54705 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-34473
CWE-94 High
Available
Exploited
- 13.07.2021 SB2021071319
#VU54704 - Permissions, Privileges, and Access Controls
CVE-2021-34523
CWE-264 Low
Available
Exploited
- 13.07.2021 SB2021071319
#VU54703 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-31206
CWE-94 High
No
No
- 13.07.2021 SB2021071319
#VU53085 - Security Features
CVE-2021-31207
CWE-254 Low
Available
Exploited
- 11.05.2021 SB2021051112
#VU53084 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-31198
CWE-94 High
No
No
- 11.05.2021 SB2021051112
#VU53083 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-31195
CWE-94 High
Available
No
- 11.05.2021 SB2021051112
#VU53082 - Improper Validation of Integrity Check Value
CVE-2021-31209
CWE-354 Medium
No
No
- 11.05.2021 SB2021051112
#VU52141 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-28483
CWE-94 Low
Available
No
2013 Cumulative Update 23 Apr21SU 15.00.1497.015, 2016 Cumulative Update 19 Apr21SU 15.01.2176.012, 2016 Cumulative Update 20 Apr21SU 15.01.2242.008, 2019 Cumulative Update 8 Apr21SU 15.02.0792.013, 2019 Cumulative Update 9 Apr21SU 15.02.0858.010 13.04.2021 SB2021041327
#VU52140 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-28482
CWE-94 Medium
Available
No
2013 Cumulative Update 23 Apr21SU 15.00.1497.015, 2016 Cumulative Update 19 Apr21SU 15.01.2176.012, 2016 Cumulative Update 20 Apr21SU 15.01.2242.008, 2019 Cumulative Update 8 Apr21SU 15.02.0792.013, 2019 Cumulative Update 9 Apr21SU 15.02.0858.010 13.04.2021 SB2021041327
#VU52139 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-28481
CWE-94 High
Available
No
2013 Cumulative Update 23 Apr21SU 15.00.1497.015, 2016 Cumulative Update 19 Apr21SU 15.01.2176.012, 2016 Cumulative Update 20 Apr21SU 15.01.2242.008, 2019 Cumulative Update 8 Apr21SU 15.02.0792.013, 2019 Cumulative Update 9 Apr21SU 15.02.0858.010 13.04.2021 SB2021041327
#VU52138 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-28480
CWE-94 High
Available
No
2013 Cumulative Update 23 Apr21SU 15.00.1497.015, 2016 Cumulative Update 19 Apr21SU 15.01.2176.012, 2016 Cumulative Update 20 Apr21SU 15.01.2242.008, 2019 Cumulative Update 8 Apr21SU 15.02.0792.013, 2019 Cumulative Update 9 Apr21SU 15.02.0858.010 13.04.2021 SB2021041327
#VU51174 - Improper input validation
CVE-2021-26412
CWE-20 High
No
No
- 03.03.2021 SB2021030301
#VU51173 - Improper input validation
CVE-2021-26854
CWE-20 High
No
No
- 02.03.2021 SB2021030301
#VU51172 - Improper input validation
CVE-2021-27078
CWE-20 High
No
No
- 02.03.2021 SB2021030301
#VU51171 - Server-Side Request Forgery (SSRF)
CVE-2021-26855
CWE-918 Critical
Available
Exploited
- 02.03.2021 SB2021030301
#VU51170 - Improper input validation
CVE-2021-26857
CWE-20 Critical
Available
Exploited
- 02.03.2021 SB2021030301
#VU51169 - Improper input validation
CVE-2021-26858
CWE-20 Critical
Available
Exploited
- 02.03.2021 SB2021030301
#VU51168 - Improper input validation
CVE-2021-27065
CWE-20 Critical
Available
Exploited
- 02.03.2021 SB2021030301
#VU50472 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-1730
CWE-451 Medium
No
No
- 09.02.2021 SB2021020931
#VU50471 - Cross-Site Request Forgery (CSRF)
CVE-2021-24085
CWE-352 Medium
Available
No
- 09.02.2021 SB2021020931


Showing elements 101 - 120 out of 225