Microsoft Exchange Server vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
250 matching records
- Medium6.5Microsoft Exchange Server Spoofing VulnerabilityCheck if you run itEPSS 4.63%Feb 25, 2021
- Medium5.4A spoofing vulnerability exists in Microsoft Exchange Server which could result in an attack that would allow a malicious actor to impersonate the user.Check if you run itEPSS 1.82%Feb 25, 2021
- High8.8Microsoft Exchange Server Information Disclosure VulnerabilityCheck this weekEPSS 70.63%Dec 10, 2020
- Critical9.1CVE-2020-17142 is listed by Microsoft Exchange Remote Code Execution Vulnerability.Check if you run itEPSS 3.37%Dec 10, 2020
- High8.4CVE-2020-17141 is listed by Microsoft Exchange Remote Code Execution Vulnerability.Check if you run itEPSS 6.63%Dec 10, 2020
- Critical9.1CVE-2020-17132 is listed by Microsoft Exchange Remote Code Execution Vulnerability.Check this weekEPSS 89.90%Dec 10, 2020
- Medium6.6CVE-2020-17117 is listed by Microsoft Exchange Remote Code Execution Vulnerability.Check this weekEPSS 48.87%Dec 10, 2020
- High8.4Microsoft Exchange Server Remote Code Execution VulnerabilityPatch nowKEVEPSS 36.51%Dec 9, 2020
- Medium6.2Microsoft Exchange Server Denial of Service VulnerabilityCheck if you run itEPSS 3.63%Nov 11, 2020
- High8.5CVE-2020-17084 is listed by Microsoft Exchange Server Remote Code Execution Vulnerability.Check if you run itEPSS 3.85%Nov 11, 2020
- Medium5.5CVE-2020-17083 is listed by Microsoft Exchange Server Remote Code Execution Vulnerability.Check this weekEPSS 11.98%Nov 11, 2020
- High7.1An information disclosure vulnerability exists in how Microsoft Exchange validates tokens when handling certain messages.Check if you run itEPSS 2.73%Oct 16, 2020
- High8.4Microsoft Exchange Server Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 46.50%Sep 11, 2020
- Medium5.4CVE-2020-0903 is listed by inventory_critical.Check if you run itEPSS 1.65%Mar 12, 2020
- High8.1CVE-2020-0692 is listed by An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of Privilege Vulnerabi…Check if you run itEPSS 3.26%Feb 11, 2020
- High8.8Microsoft Exchange Server Validation Key Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.95%Feb 11, 2020
- Critical9.8A remote code execution vulnerability exists in Microsoft Exchange through the deserialization of metadata via PowerShell, aka 'Microsoft Exchange Remote Code Executio…Check this weekEPSS 21.68%Nov 12, 2019
- Medium6.1A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web App (OWA) fails to properly handle web requests, aka 'Microsoft Exchange Spoofing Vulnerability'.Check if you run itEPSS 1.98%Sep 11, 2019
- High7.5A denial of service vulnerability exists in Microsoft Exchange Server software when the software fails to properly handle objects in memory, aka 'Microsoft Exchange De…Check if you run itEPSS 6.18%Sep 11, 2019
- Medium5.4CVE-2019-1137 is listed by inventory_critical.Check if you run itEPSS 1.58%Jul 15, 2019
- High8.1CVE-2019-1136 is listed by An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of Privilege Vulnerabi…Check if you run itEPSS 3.38%Jul 15, 2019
- Medium6.5An information disclosure vulnerability exists when Exchange allows creation of entities with Display Names having non-printable characters.Check if you run itEPSS 5.33%Jul 15, 2019
- Medium6.1CVE-2019-0858 is listed by A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access (OWA) fails to properly handle web requests, aka 'Micro…Check if you run itEPSS 2.10%Apr 9, 2019
- Medium5.4CVE-2019-0817 is listed by A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access (OWA) fails to properly handle web requests, aka 'Micro…Check if you run itEPSS 2.29%Apr 9, 2019
- High8.1CVE-2019-0724 is listed by An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of Privilege Vulnerabi…Check this weekEPSS 23.80%Mar 5, 2019