Known vulnerabilities in Microsoft Exchange Server - page 9

Vendor: Microsoft
Software CPE: cpe:2.3:a:microsoft:microsoft_exchange_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 225
Public exploits: 37
Known exploited (KEV): 20
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft Exchange Server Microsoft Exchange Server is affected by 225 known vulnerabilities: 8 critical, 47 high, 107 medium, 63 low Critical High Medium Low

Vulnerabilities (225)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU17593 - Improper input validation
CVE-2018-3220
CWE-20 Medium
No
No
2010 Service Pack 3 Update Rollup 26, 2013 Cumulative Update 22 15.00.1473.003, 2016 Cumulative Update 12 15.01.1713.005, 2019 Cumulative Update 1 15.02.0330.005 12.02.2019 SB2018101715
SB2019021302
#VU17592 - Improper input validation
CVE-2018-3219
CWE-20 Medium
No
No
2010 Service Pack 3 Update Rollup 26, 2013 Cumulative Update 22 15.00.1473.003, 2016 Cumulative Update 12 15.01.1713.005, 2019 Cumulative Update 1 15.02.0330.005 12.02.2019 SB2018101715
SB2019021302
#VU17591 - Improper input validation
CVE-2018-3218
CWE-20 Medium
No
No
2010 Service Pack 3 Update Rollup 26, 2013 Cumulative Update 22 15.00.1473.003, 2016 Cumulative Update 12 15.01.1713.005, 2019 Cumulative Update 1 15.02.0330.005 12.02.2019 SB2018101715
SB2019021302
#VU17590 - Improper input validation
CVE-2018-3217
CWE-20 Medium
No
No
2010 Service Pack 3 Update Rollup 26, 2013 Cumulative Update 22 15.00.1473.003, 2016 Cumulative Update 12 15.01.1713.005, 2019 Cumulative Update 1 15.02.0330.005 12.02.2019 SB2018101715
SB2019021302
#VU17588 - Improper Access Control
CVE-2019-0724
CWE-284 Medium
Available
No
2010 Service Pack 3 Update Rollup 26, 2013 Cumulative Update 22 15.00.1473.003, 2016 Cumulative Update 12 15.01.1713.005, 2019 Cumulative Update 1 15.02.0330.005 12.02.2019 SB2019012701
#VU17228 - Improper Access Control
CVE-2019-0686
CWE-284 Medium
No
No
2010 Service Pack 3 Update Rollup 26, 2013 Cumulative Update 22 15.00.1473.003, 2016 Cumulative Update 12 15.01.1713.005, 2019 Cumulative Update 1 15.02.0330.005 27.01.2019 SB2019012701
#VU16845 - Exposure of sensitive information to an unauthorized actor
CVE-2019-0588
CWE-200 Low
No
No
2013 Cumulative Update 22 15.00.1473.003 08.01.2019 SB2019010808
#VU16480 - Improper input validation
CVE-2018-8604
CWE-20 Low
No
No
- 11.12.2018 SB2018121116
#VU15841 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2018-8581
CWE-300 Low
No
Exploited
- 13.11.2018 SB2018111313
#VU15258 - Improper input validation
CVE-2018-8448
CWE-20 Low
No
No
- 09.10.2018 SB2018100925
#VU15257 - Improper input validation
CVE-2018-8265
CWE-20 High
No
No
- 09.10.2018 SB2018100925
#VU15268 - Uncontrolled Search Path Element
CVE-2010-3190
CWE-427 High
No
No
- 09.10.2018 SB2018101002
SB2022110105
#VU14369 - Memory corruption
CVE-2018-8302
CWE-119 High
No
No
- 14.08.2018 SB2018081411
#VU14371 - Improper Access Control
CVE-2018-8374
CWE-284 Medium
No
No
- 14.08.2018 SB2018081411
#VU12452 - Out-of-bounds read
CVE-2018-8151
CWE-125 Low
No
No
- 08.05.2018 SB2018050812
#VU12451 - Memory corruption
CVE-2018-8154
CWE-119 High
No
No
- 08.05.2018 SB2018050812
#VU11928 - Permissions, Privileges, and Access Controls
CVE-2018-2806
CWE-264 Low
No
No
- 19.04.2018 SB2018041914
SB2018062101
#VU11927 - Permissions, Privileges, and Access Controls
CVE-2018-2801
CWE-264 Low
No
No
- 19.04.2018 SB2018041914
SB2018062101
#VU11924 - Permissions, Privileges, and Access Controls
CVE-2018-2768
CWE-264 Low
No
No
- 19.04.2018 SB2018041914
SB2018062101
#VU16846 - Memory corruption
CVE-2019-0586
CWE-119 High
No
No
- 08.01.2016 SB2019010808


Showing elements 161 - 180 out of 225