Known vulnerabilities in Microsoft Exchange Server - page 8

Vendor: Microsoft
Software CPE: cpe:2.3:a:microsoft:microsoft_exchange_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 216
Public exploits: 36
Known exploited (KEV): 20
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft Exchange Server Microsoft Exchange Server is affected by 216 known vulnerabilities: 8 critical, 46 high, 102 medium, 60 low Critical High Medium Low

Vulnerabilities (216)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU17594 - Improper input validation
CVE-2018-3221
CWE-20 Medium
No
No
2010 Service Pack 3 Update Rollup 26, 2013 Cumulative Update 22 15.00.1473.003, 2016 Cumulative Update 12 15.01.1713.005, 2019 Cumulative Update 1 15.02.0330.005 12.02.2019 SB2018101715
SB2019021302
#VU17595 - Improper input validation
CVE-2018-3302
CWE-20 Medium
No
No
2010 Service Pack 3 Update Rollup 26, 2013 Cumulative Update 22 15.00.1473.003, 2016 Cumulative Update 12 15.01.1713.005, 2019 Cumulative Update 1 15.02.0330.005 12.02.2019 SB2018101715
SB2019021302
#VU17596 - Improper input validation
CVE-2018-3222
CWE-20 Medium
No
No
2010 Service Pack 3 Update Rollup 26, 2013 Cumulative Update 22 15.00.1473.003, 2016 Cumulative Update 12 15.01.1713.005, 2019 Cumulative Update 1 15.02.0330.005 12.02.2019 SB2018101715
SB2019021302
#VU17597 - Improper input validation
CVE-2018-3223
CWE-20 Medium
No
No
2010 Service Pack 3 Update Rollup 26, 2013 Cumulative Update 22 15.00.1473.003, 2016 Cumulative Update 12 15.01.1713.005, 2019 Cumulative Update 1 15.02.0330.005 12.02.2019 SB2018101715
SB2019021302
#VU17598 - Improper input validation
CVE-2018-3224
CWE-20 Medium
No
No
2010 Service Pack 3 Update Rollup 26, 2013 Cumulative Update 22 15.00.1473.003, 2016 Cumulative Update 12 15.01.1713.005, 2019 Cumulative Update 1 15.02.0330.005 12.02.2019 SB2018101715
SB2019021302
#VU17599 - Improper input validation
CVE-2018-3225
CWE-20 Medium
No
No
2010 Service Pack 3 Update Rollup 26, 2013 Cumulative Update 22 15.00.1473.003, 2016 Cumulative Update 12 15.01.1713.005, 2019 Cumulative Update 1 15.02.0330.005 12.02.2019 SB2018101715
SB2019021302
#VU17600 - Improper input validation
CVE-2018-3226
CWE-20 Medium
No
No
2010 Service Pack 3 Update Rollup 26, 2013 Cumulative Update 22 15.00.1473.003, 2016 Cumulative Update 12 15.01.1713.005, 2019 Cumulative Update 1 15.02.0330.005 12.02.2019 SB2018101715
SB2019021302
#VU17601 - Improper input validation
CVE-2018-3227
CWE-20 Medium
No
No
2010 Service Pack 3 Update Rollup 26, 2013 Cumulative Update 22 15.00.1473.003, 2016 Cumulative Update 12 15.01.1713.005, 2019 Cumulative Update 1 15.02.0330.005 12.02.2019 SB2018101715
SB2019021302
#VU17602 - Improper input validation
CVE-2018-3228
CWE-20 Medium
No
No
2010 Service Pack 3 Update Rollup 26, 2013 Cumulative Update 22 15.00.1473.003, 2016 Cumulative Update 12 15.01.1713.005, 2019 Cumulative Update 1 15.02.0330.005 12.02.2019 SB2018101715
SB2019021302
#VU17603 - Improper input validation
CVE-2018-3229
CWE-20 Medium
No
No
2010 Service Pack 3 Update Rollup 26, 2013 Cumulative Update 22 15.00.1473.003, 2016 Cumulative Update 12 15.01.1713.005, 2019 Cumulative Update 1 15.02.0330.005 12.02.2019 SB2018101715
SB2019021302
#VU17604 - Improper input validation
CVE-2018-3230
CWE-20 Medium
No
No
2010 Service Pack 3 Update Rollup 26, 2013 Cumulative Update 22 15.00.1473.003, 2016 Cumulative Update 12 15.01.1713.005, 2019 Cumulative Update 1 15.02.0330.005 12.02.2019 SB2018101715
SB2019021302
#VU17593 - Improper input validation
CVE-2018-3220
CWE-20 Medium
No
No
2010 Service Pack 3 Update Rollup 26, 2013 Cumulative Update 22 15.00.1473.003, 2016 Cumulative Update 12 15.01.1713.005, 2019 Cumulative Update 1 15.02.0330.005 12.02.2019 SB2018101715
SB2019021302
#VU17592 - Improper input validation
CVE-2018-3219
CWE-20 Medium
No
No
2010 Service Pack 3 Update Rollup 26, 2013 Cumulative Update 22 15.00.1473.003, 2016 Cumulative Update 12 15.01.1713.005, 2019 Cumulative Update 1 15.02.0330.005 12.02.2019 SB2018101715
SB2019021302
#VU17591 - Improper input validation
CVE-2018-3218
CWE-20 Medium
No
No
2010 Service Pack 3 Update Rollup 26, 2013 Cumulative Update 22 15.00.1473.003, 2016 Cumulative Update 12 15.01.1713.005, 2019 Cumulative Update 1 15.02.0330.005 12.02.2019 SB2018101715
SB2019021302
#VU17590 - Improper input validation
CVE-2018-3217
CWE-20 Medium
No
No
2010 Service Pack 3 Update Rollup 26, 2013 Cumulative Update 22 15.00.1473.003, 2016 Cumulative Update 12 15.01.1713.005, 2019 Cumulative Update 1 15.02.0330.005 12.02.2019 SB2018101715
SB2019021302
#VU17588 - Improper Access Control
CVE-2019-0724
CWE-284 Medium
Available
No
2010 Service Pack 3 Update Rollup 26, 2013 Cumulative Update 22 15.00.1473.003, 2016 Cumulative Update 12 15.01.1713.005, 2019 Cumulative Update 1 15.02.0330.005 12.02.2019 SB2019012701
#VU17228 - Improper Access Control
CVE-2019-0686
CWE-284 Medium
No
No
2010 Service Pack 3 Update Rollup 26, 2013 Cumulative Update 22 15.00.1473.003, 2016 Cumulative Update 12 15.01.1713.005, 2019 Cumulative Update 1 15.02.0330.005 27.01.2019 SB2019012701
#VU16845 - Exposure of sensitive information to an unauthorized actor
CVE-2019-0588
CWE-200 Low
No
No
2013 Cumulative Update 22 15.00.1473.003 08.01.2019 SB2019010808
#VU16480 - Improper input validation
CVE-2018-8604
CWE-20 Low
No
No
- 11.12.2018 SB2018121116
#VU16846 - Memory corruption
CVE-2019-0586
CWE-119 High
No
No
- 08.01.2016 SB2019010808


Showing elements 141 - 160 out of 216