Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.5Affected Microsoft products: Microsoft Exchange Server 2016 Cumulative Update 23, Microsoft Exchange Server 2019 Cumulative Update 14, Microsoft Exchange Server Subscr…Oct 13, 2026
- High7.8Affected Microsoft products: Microsoft Exchange Server 2019 Cumulative Update 14, Microsoft Exchange Server Subscription Edition RTM, Microsoft Exchange Server 2016 Cu…Oct 13, 2026
- High7.8Affected Microsoft products: Microsoft Exchange Server 2019 Cumulative Update 14, Microsoft Exchange Server Subscription Edition RTM, Microsoft Exchange Server 2016 Cu…Oct 13, 2026
- High8.8Affected Microsoft products: Microsoft Exchange Server 2016 Cumulative Update 23, Microsoft Exchange Server 2019 Cumulative Update 14, Microsoft Exchange Server 2019 C…Oct 13, 2026
- High8.1Affected Microsoft products: Microsoft Exchange Server Subscription Edition RTM, Microsoft Exchange Server 2019 Cumulative Update 15, Microsoft Exchange Server 2019 Cu…Oct 13, 2026
- Critical9.3Affected Microsoft products: Microsoft Exchange Server 2016 Cumulative Update 23, Microsoft Exchange Server 2019 Cumulative Update 15, Microsoft Exchange Server Subscr…Oct 13, 2026
- High8.8Weak authentication in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.EPSS 0.5%Oct 2, 2026
- High8.0Authentication bypass by capture-replay in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.EPSS 0.7%Aug 11, 2026
- High8.8Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute code over a network.EPSS 1.0%Jul 14, 2026
- Medium6.1Microsoft Exchange Server Cross-Site Scripting VulnerabilityKEVEPSS 0.5%May 14, 2026
- Critical9.9Server-side request forgery (ssrf) in Microsoft Exchange allows an authorized attacker to elevate privileges over a network.Mar 19, 2026
- Medium5.3User interface (ui) misrepresentation of critical information in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.EPSS 0.8%Dec 9, 2025
- High7.5Improper input validation in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.EPSS 1.0%Dec 9, 2025
- Critical9.8Microsoft Exchange Server Privilege Escalation VulnerabilityKEVEPSS 12.6%Feb 13, 2024
- High8.8Microsoft Exchange Server Deserialization of Untrusted Data VulnerabilityKEVEPSS 59.3%Feb 14, 2023
- High8.8Microsoft Exchange Server Privilege Escalation VulnerabilityKEVEPSS 77.3%Nov 9, 2022
- High8.0Microsoft Exchange Server Remote Code Execution VulnerabilityKEVEPSS 100.0%Sep 30, 2022
- High8.8Microsoft Exchange Server Server-Side Request Forgery VulnerabilityKEVEPSS 100.0%Sep 30, 2022
- High8.8Microsoft Exchange Server Remote Code Execution VulnerabilityKEVEPSS 91.7%Nov 9, 2021
- Critical9.0Microsoft Exchange Server Privilege Escalation VulnerabilityKEVEPSS 100.0%Jul 14, 2021
- Critical9.1Microsoft Exchange Server Remote Code Execution VulnerabilityKEVEPSS 100.0%Jul 14, 2021
- High7.3Microsoft Exchange Server Information DisclosureKEVEPSS 98.2%Jul 14, 2021
- High7.2Microsoft Exchange Server Information Disclosure VulnerabilityKEVEPSS 54.1%Jul 14, 2021
- Medium6.6Microsoft Exchange Server Security Feature Bypass VulnerabilityKEVEPSS 99.8%May 11, 2021
- High7.8Microsoft Exchange Server Remote Code Execution VulnerabilityKEVEPSS 99.9%Mar 2, 2021
31 records · page 1 of 2
PreviousNext