Known vulnerabilities in Microsoft Exchange Server - page 7

Vendor: Microsoft
Software: Microsoft Exchange Server
Software CPE: cpe:2.3:a:microsoft:microsoft_exchange_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 225
Public exploits: 37
Known exploited (KEV): 20
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft Exchange Server Microsoft Exchange Server is affected by 225 known vulnerabilities: 8 critical, 47 high, 107 medium, 63 low Critical High Medium Low

Vulnerabilities (225)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU48886 - Improper input validation
CVE-2020-17144		 CWE-20 High
Available
Exploited
 2010 Service Pack 3 Update Rollup 31 08.12.2020 SB2020120847
#VU48853 - Exposure of sensitive information to an unauthorized actor
CVE-2020-17143		 CWE-200 Medium
Available
No
 - 08.12.2020 SB2020120847
#VU48852 - Improper input validation
CVE-2020-17142		 CWE-20 Low
No
No
 - 08.12.2020 SB2020120847
#VU48851 - Improper input validation
CVE-2020-17141		 CWE-20 Low
Available
No
 - 08.12.2020 SB2020120847
#VU48850 - Improper input validation
CVE-2020-17132		 CWE-20 Low
No
No
 - 08.12.2020 SB2020120847
#VU48849 - Improper input validation
CVE-2020-17117		 CWE-20 Low
No
No
 - 08.12.2020 SB2020120847
#VU48283 - Improper input validation
CVE-2020-17085		 CWE-20 Low
No
No
 - 10.11.2020 SB2020111035
#VU48282 - Memory corruption
CVE-2020-17084		 CWE-119 Medium
No
No
 - 10.11.2020 SB2020111035
#VU48279 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-17083		 CWE-79 Medium
Available
No
 - 10.11.2020 SB2020111035
#VU47598 - Exposure of sensitive information to an unauthorized actor
CVE-2020-16969		 CWE-200 Medium
No
No
 - 13.10.2020 SB2020101346
#VU46401 - Memory corruption
CVE-2020-16875		 CWE-119 High
Available
No
 - 08.09.2020 SB2020090811
#VU25911 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-0903		 CWE-79 Medium
No
No
 2019 Cumulative Update 5 15.02.0595.003 10.03.2020 SB2020031025
#VU25227 - Permissions, Privileges, and Access Controls
CVE-2020-0692		 CWE-264 Medium
No
No
 - 11.02.2020 SB2020021147
#VU25226 - Deserialization of Untrusted Data
CVE-2020-0688		 CWE-502 High
Available
Exploited
 - 11.02.2020 SB2020021146
#VU22681 - Deserialization of Untrusted Data
CVE-2019-1373		 CWE-502 Medium
No
No
 - 12.11.2019 SB2019111207
#VU21036 - Memory corruption
CVE-2019-1233		 CWE-119 Medium
No
No
 - 11.09.2019 SB2019091107
#VU21035 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-1266		 CWE-79 Medium
No
No
 - 11.09.2019 SB2019091107
#VU19080 - Improper input validation
CVE-2019-1084		 CWE-20 Low
No
No
 - 10.07.2019 SB2019071001
#VU19079 - Improper Authentication
CVE-2019-1136		 CWE-287 Medium
No
No
 - 10.07.2019 SB2019071002
#VU19078 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-1137		 CWE-79 Low
No
No
 - 10.07.2019 SB2019071002


Showing elements 121 - 140 out of 225