Known vulnerabilities in Microsoft Exchange Server - page 6

Vendor: Microsoft
Software CPE: cpe:2.3:a:microsoft:microsoft_exchange_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 216
Public exploits: 36
Known exploited (KEV): 20
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft Exchange Server Microsoft Exchange Server is affected by 216 known vulnerabilities: 8 critical, 46 high, 102 medium, 60 low Critical High Medium Low

Vulnerabilities (216)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU52140 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-28482
CWE-94 Medium
Available
No
2013 Cumulative Update 23 Apr21SU 15.00.1497.015, 2016 Cumulative Update 19 Apr21SU 15.01.2176.012, 2016 Cumulative Update 20 Apr21SU 15.01.2242.008, 2019 Cumulative Update 8 Apr21SU 15.02.0792.013, 2019 Cumulative Update 9 Apr21SU 15.02.0858.010 13.04.2021 SB2021041327
#VU52139 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-28481
CWE-94 High
Available
No
2013 Cumulative Update 23 Apr21SU 15.00.1497.015, 2016 Cumulative Update 19 Apr21SU 15.01.2176.012, 2016 Cumulative Update 20 Apr21SU 15.01.2242.008, 2019 Cumulative Update 8 Apr21SU 15.02.0792.013, 2019 Cumulative Update 9 Apr21SU 15.02.0858.010 13.04.2021 SB2021041327
#VU51174 - Improper input validation
CVE-2021-26412
CWE-20 High
No
No
- 03.03.2021 SB2021030301
#VU51173 - Improper input validation
CVE-2021-26854
CWE-20 High
No
No
- 02.03.2021 SB2021030301
#VU51172 - Improper input validation
CVE-2021-27078
CWE-20 High
No
No
- 02.03.2021 SB2021030301
#VU51171 - Server-Side Request Forgery (SSRF)
CVE-2021-26855
CWE-918 Critical
Available
Exploited
- 02.03.2021 SB2021030301
#VU51170 - Improper input validation
CVE-2021-26857
CWE-20 Critical
Available
Exploited
- 02.03.2021 SB2021030301
#VU51169 - Improper input validation
CVE-2021-26858
CWE-20 Critical
Available
Exploited
- 02.03.2021 SB2021030301
#VU51168 - Improper input validation
CVE-2021-27065
CWE-20 Critical
Available
Exploited
- 02.03.2021 SB2021030301
#VU50472 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-1730
CWE-451 Medium
No
No
- 09.02.2021 SB2021020931
#VU50471 - Cross-Site Request Forgery (CSRF)
CVE-2021-24085
CWE-352 Medium
Available
No
- 09.02.2021 SB2021020931
#VU48886 - Improper input validation
CVE-2020-17144
CWE-20 High
Available
Exploited
2010 Service Pack 3 Update Rollup 31 08.12.2020 SB2020120847
#VU48853 - Exposure of sensitive information to an unauthorized actor
CVE-2020-17143
CWE-200 Medium
Available
No
- 08.12.2020 SB2020120847
#VU48852 - Improper input validation
CVE-2020-17142
CWE-20 Low
No
No
- 08.12.2020 SB2020120847
#VU48851 - Improper input validation
CVE-2020-17141
CWE-20 Low
Available
No
- 08.12.2020 SB2020120847
#VU48850 - Improper input validation
CVE-2020-17132
CWE-20 Low
No
No
- 08.12.2020 SB2020120847
#VU48849 - Improper input validation
CVE-2020-17117
CWE-20 Low
No
No
- 08.12.2020 SB2020120847
#VU48283 - Improper input validation
CVE-2020-17085
CWE-20 Low
No
No
- 10.11.2020 SB2020111035
#VU48282 - Memory corruption
CVE-2020-17084
CWE-119 Medium
No
No
- 10.11.2020 SB2020111035
#VU48279 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-17083
CWE-79 Medium
Available
No
- 10.11.2020 SB2020111035


Showing elements 101 - 120 out of 216