Known vulnerabilities in Microsoft Exchange Server - page 7

Vendor: Microsoft
Software CPE: cpe:2.3:a:microsoft:microsoft_exchange_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 216
Public exploits: 36
Known exploited (KEV): 20
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft Exchange Server Microsoft Exchange Server is affected by 216 known vulnerabilities: 8 critical, 46 high, 102 medium, 60 low Critical High Medium Low

Vulnerabilities (216)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU47598 - Exposure of sensitive information to an unauthorized actor
CVE-2020-16969
CWE-200 Medium
No
No
- 13.10.2020 SB2020101346
#VU46401 - Memory corruption
CVE-2020-16875
CWE-119 High
Available
No
- 08.09.2020 SB2020090811
#VU25911 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-0903
CWE-79 Medium
No
No
2019 Cumulative Update 5 15.02.0595.003 10.03.2020 SB2020031025
#VU25227 - Permissions, Privileges, and Access Controls
CVE-2020-0692
CWE-264 Medium
No
No
- 11.02.2020 SB2020021147
#VU25226 - Deserialization of Untrusted Data
CVE-2020-0688
CWE-502 High
Available
Exploited
- 11.02.2020 SB2020021146
#VU22681 - Deserialization of Untrusted Data
CVE-2019-1373
CWE-502 Medium
No
No
- 12.11.2019 SB2019111207
#VU21036 - Memory corruption
CVE-2019-1233
CWE-119 Medium
No
No
- 11.09.2019 SB2019091107
#VU21035 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-1266
CWE-79 Medium
No
No
- 11.09.2019 SB2019091107
#VU19080 - Improper input validation
CVE-2019-1084
CWE-20 Low
No
No
- 10.07.2019 SB2019071001
#VU19079 - Improper Authentication
CVE-2019-1136
CWE-287 Medium
No
No
- 10.07.2019 SB2019071002
#VU19078 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-1137
CWE-79 Low
No
No
- 10.07.2019 SB2019071002
#VU19077 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Medium
No
No
- 09.07.2019 SB2019070909
#VU18197 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-0858
CWE-79 Low
No
No
- 10.04.2019 SB2019041011
#VU18196 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-0817
CWE-79 Low
No
No
- 10.04.2019 SB2019041011
#VU17611 - Improper input validation
CVE-2018-18224
CWE-20 Medium
No
No
2010 Service Pack 3 Update Rollup 26, 2013 Cumulative Update 22 15.00.1473.003, 2016 Cumulative Update 12 15.01.1713.005, 2019 Cumulative Update 1 15.02.0330.005 12.02.2019 SB2018101715
SB2019021302
#VU17609 - Improper input validation
CVE-2018-18223
CWE-20 Medium
No
No
2010 Service Pack 3 Update Rollup 26, 2013 Cumulative Update 22 15.00.1473.003, 2016 Cumulative Update 12 15.01.1713.005, 2019 Cumulative Update 1 15.02.0330.005 12.02.2019 SB2018101715
SB2019021302
#VU17605 - Improper input validation
CVE-2018-3231
CWE-20 Medium
No
No
2010 Service Pack 3 Update Rollup 26, 2013 Cumulative Update 22 15.00.1473.003, 2016 Cumulative Update 12 15.01.1713.005, 2019 Cumulative Update 1 15.02.0330.005 12.02.2019 SB2018101715
SB2019021302
#VU17606 - Improper input validation
CVE-2018-3232
CWE-20 Medium
No
No
2010 Service Pack 3 Update Rollup 26, 2013 Cumulative Update 22 15.00.1473.003, 2016 Cumulative Update 12 15.01.1713.005, 2019 Cumulative Update 1 15.02.0330.005 12.02.2019 SB2018101715
SB2019021302
#VU17607 - Improper input validation
CVE-2018-3233
CWE-20 Medium
No
No
2010 Service Pack 3 Update Rollup 26, 2013 Cumulative Update 22 15.00.1473.003, 2016 Cumulative Update 12 15.01.1713.005, 2019 Cumulative Update 1 15.02.0330.005 12.02.2019 SB2018101715
SB2019021302
#VU17608 - Improper input validation
CVE-2018-3234
CWE-20 Medium
No
No
2010 Service Pack 3 Update Rollup 26, 2013 Cumulative Update 22 15.00.1473.003, 2016 Cumulative Update 12 15.01.1713.005, 2019 Cumulative Update 1 15.02.0330.005 12.02.2019 SB2018101715
SB2019021302


Showing elements 121 - 140 out of 216