Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- High7.5Affected Microsoft products: Microsoft Exchange Server 2016 Cumulative Update 23, Microsoft Exchange Server 2019 Cumulative Update 14, Microsoft Exchange Server Subscr…EPSS 0.4%Oct 13, 2026
- High7.8Affected Microsoft products: Microsoft Exchange Server 2019 Cumulative Update 14, Microsoft Exchange Server Subscription Edition RTM, Microsoft Exchange Server 2016 Cu…EPSS 0.2%Oct 13, 2026
- High7.8Affected Microsoft products: Microsoft Exchange Server 2019 Cumulative Update 14, Microsoft Exchange Server Subscription Edition RTM, Microsoft Exchange Server 2016 Cu…EPSS 1.6%Oct 13, 2026
- High8.8Affected Microsoft products: Microsoft Exchange Server 2016 Cumulative Update 23, Microsoft Exchange Server 2019 Cumulative Update 14, Microsoft Exchange Server 2019 C…EPSS 0.8%Oct 13, 2026
- High8.1Affected Microsoft products: Microsoft Exchange Server Subscription Edition RTM, Microsoft Exchange Server 2019 Cumulative Update 15, Microsoft Exchange Server 2019 Cu…EPSS 0.9%Oct 13, 2026
- Critical9.3Affected Microsoft products: Microsoft Exchange Server 2016 Cumulative Update 23, Microsoft Exchange Server 2019 Cumulative Update 15, Microsoft Exchange Server Subscr…EPSS 0.9%Oct 13, 2026
- High8.8Weak authentication in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.EPSS 0.5%Oct 2, 2026
- High8.0Authentication bypass by capture-replay in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.EPSS 0.7%Aug 11, 2026
- High8.8Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute code over a network.EPSS 1.0%Jul 14, 2026
- Medium6.1Microsoft Exchange Server Cross-Site Scripting VulnerabilityKEVEPSS 0.5%May 14, 2026
- Medium5.3User interface (ui) misrepresentation of critical information in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.EPSS 0.8%Dec 9, 2025
- High7.5Improper input validation in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.EPSS 1.0%Dec 9, 2025
- UnknownMicrosoft Exchange Server Remote Code Execution VulnerabilityKEVEPSS 36.2%Jul 25, 2024
- UnknownMicrosoft Exchange Server Remote Code Execution VulnerabilityKEVEPSS 79.7%May 24, 2024
- UnknownMicrosoft Exchange Server Spoofing VulnerabilityKEVEPSS 31.8%May 6, 2024
- Critical9.8Microsoft Exchange Server Privilege Escalation VulnerabilityKEVEPSS 12.6%Feb 13, 2024
- High8.8Microsoft Exchange Server Deserialization of Untrusted Data VulnerabilityKEVEPSS 59.3%Feb 14, 2023
- High8.8Microsoft Exchange Server Privilege Escalation VulnerabilityKEVEPSS 77.3%Nov 9, 2022
- UnknownMicrosoft Exchange Server Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')KEVEPSS 46.5%Oct 21, 2022
- High8.0Microsoft Exchange Server Remote Code Execution VulnerabilityKEVEPSS 100.0%Sep 29, 2022
- High8.8Microsoft Exchange Server Server-Side Request Forgery VulnerabilityKEVEPSS 100.0%Sep 29, 2022
- UnknownMicrosoft Exchange Server Privilege EscalationKEVEPSS 4.4%Sep 14, 2022
- UnknownMicrosoft Exchange Server Privilege EscalationKEVEPSS 1.2%Sep 14, 2022
- UnknownMicrosoft Exchange Server Spoofing VulnerabilityKEVEPSS 93.5%May 31, 2022
- UnknownMicrosoft Exchange Server Remote Code ExecutionKEVEPSS 13.0%Jan 17, 2022
42 records · page 1 of 2
PreviousNext