Known vulnerabilities in Microsoft Exchange Server - page 9

Vendor: Microsoft
Software: Microsoft Exchange Server
Software CPE: cpe:2.3:a:microsoft:microsoft_exchange_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 216
Public exploits: 36
Known exploited (KEV): 20
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft Exchange Server Microsoft Exchange Server is affected by 216 known vulnerabilities: 8 critical, 46 high, 102 medium, 60 low Critical High Medium Low

Vulnerabilities (216)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU15841 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2018-8581		 CWE-300 Low
No
Exploited
 - 13.11.2018 SB2018111313
#VU15258 - Improper input validation
CVE-2018-8448		 CWE-20 Low
No
No
 - 09.10.2018 SB2018100925
#VU15257 - Improper input validation
CVE-2018-8265		 CWE-20 High
No
No
 - 09.10.2018 SB2018100925
#VU15268 - Uncontrolled Search Path Element
CVE-2010-3190		 CWE-427 High
No
No
 - 09.10.2018 SB2018101002
SB2022110105
#VU14369 - Memory corruption
CVE-2018-8302		 CWE-119 High
No
No
 - 14.08.2018 SB2018081411
#VU14371 - Improper Access Control
CVE-2018-8374		 CWE-284 Medium
No
No
 - 14.08.2018 SB2018081411
#VU12455 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-8153		 CWE-79 Low
No
No
 - 08.05.2018 SB2018050812
#VU12454 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-8152		 CWE-79 Low
No
No
 - 08.05.2018 SB2018050812
#VU12452 - Out-of-bounds read
CVE-2018-8151		 CWE-125 Low
No
No
 - 08.05.2018 SB2018050812
#VU12451 - Memory corruption
CVE-2018-8154		 CWE-119 High
No
No
 - 08.05.2018 SB2018050812
#VU12453 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-8159		 CWE-79 Low
No
No
 - 08.05.2018 SB2018050812
#VU11928 - Permissions, Privileges, and Access Controls
CVE-2018-2806		 CWE-264 Low
No
No
 - 19.04.2018 SB2018041914
SB2018062101
#VU11927 - Permissions, Privileges, and Access Controls
CVE-2018-2801		 CWE-264 Low
No
No
 - 19.04.2018 SB2018041914
SB2018062101
#VU11924 - Permissions, Privileges, and Access Controls
CVE-2018-2768		 CWE-264 Low
No
No
 - 19.04.2018 SB2018041914
SB2018062101
#VU11501 - Memory corruption
CVE-2018-0986		 CWE-119 High
No
No
 - 03.04.2018 SB2018040403
#VU11001 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2018-0924		 CWE-601 Low
No
No
 - 13.03.2018 SB2018031309
#VU11003 - Exposure of sensitive information to an unauthorized actor
CVE-2018-0941		 CWE-200 Low
No
No
 - 13.03.2018 SB2018031309
#VU11007 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-0940		 CWE-79 Medium
No
No
 - 13.03.2018 SB2018031309
#VU9641 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2017-11932		 CWE-451 Low
No
No
 - 12.12.2017 SB2017121210
#VU9547 - Memory corruption
CVE-2017-11937		 CWE-119 High
No
No
 - 07.12.2017 SB2017120701


Showing elements 161 - 180 out of 216