Microsoft Exchange Server vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
250 matching records
- High7.4CVE-2019-0686 is listed by An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of Privilege Vulnerabi…Check if you run itEPSS 5.03%Mar 5, 2019
- Medium6.5An information disclosure vulnerability exists when the Microsoft Exchange PowerShell API grants calendar contributors more view permissions than intended, aka "Micros…Check if you run itEPSS 4.63%Jan 8, 2019
- Critical9.8CVE-2019-0586 is listed by inventory_critical.Check this weekEPSS 15.40%Jan 8, 2019
- Medium4.3CVE-2018-8604 is listed by inventory_critical.Check if you run itEPSS 2.41%Dec 12, 2018
- High7.4Microsoft Exchange Server Privilege Escalation VulnerabilityPatch nowKEVEPSS 27.56%Nov 13, 2018
- Medium5.4CVE-2018-8448 is listed by inventory_critical.Check if you run itEPSS 3.17%Oct 10, 2018
- High7.8A remote code execution vulnerability exists in the way Microsoft Exchange software parses specially crafted email messages, aka "Microsoft Exchange Remote Code Execut…Check this weekEPSS 19.27%Oct 10, 2018
- High8.6Rollup 18 for Microsoft Exchange Server 2010 SP3 and previous versions has an SSRF vulnerability via the username parameter in /owa/auth/logon.aspx in the OWA (Outlook…Check this weekEPSS 11.33%Sep 21, 2018
- Medium4.3CVE-2018-8374 is listed by inventory_critical.Check if you run itEPSS 3.27%Aug 15, 2018
- Critical9.8CVE-2018-8302 is listed by inventory_critical.Check this weekEPSS 27.07%Aug 15, 2018
- Medium5.4An elevation of privilege vulnerability exists when Microsoft Exchange Outlook Web Access (OWA) fails to properly handle web requests, aka "Microsoft Exchange Elevatio…Check if you run itEPSS 3.51%May 9, 2018
- Critical9.8CVE-2018-8154 is listed by inventory_critical.Check this weekEPSS 23.64%May 9, 2018
- Medium5.4A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access (OWA) fails to properly handle web requests, aka "Microsoft Exchange Spoofing Vuln…Check if you run itEPSS 3.44%May 9, 2018
- Medium5.4CVE-2018-8152 is listed by inventory_critical.Check if you run itEPSS 3.51%May 9, 2018
- Medium4.3CVE-2018-8151 is listed by inventory_critical.Check if you run itEPSS 8.70%May 9, 2018
- High8.8Microsoft Exchange Server Out-of-bounds WritePatch nowKEVEPSS 63.27%Apr 4, 2018
- Medium5.5CVE-2018-0941 is listed by inventory_critical.Check this weekEPSS 12.46%Mar 14, 2018
- Medium6.5Microsoft Exchange Outlook Web Access (OWA) in Microsoft Exchange Server 2010 Service Pack 3 Update Rollup 20, Microsoft Exchange Server 2013 Cumulative Update 18, Mic…Check if you run itEPSS 7.28%Mar 14, 2018
- Medium6.5CVE-2018-0924 is listed by inventory_critical.Check if you run itEPSS 8.03%Mar 14, 2018
- High8.1Microsoft Exchange Server 2016 CU5 and Microsoft Exchange Server 2016 CU5 allow a spoofing vulnerability due to the way Outlook Web Access (OWA) validates web requests…Check if you run itEPSS 5.88%Dec 12, 2017
- Medium6.1Microsoft Exchange Server 2016 allows an elevation of privilege vulnerability when Microsoft Exchange Outlook Web Access (OWA) fails to properly handle web requests, a…Check if you run itEPSS 3.38%Sep 13, 2017
- Medium5.3Microsoft Exchange Server 2013 and Microsoft Exchange Server 2016 allow an input sanitization issue with Microsoft Exchange that could potentially result in unintended…Check if you run itEPSS 6.56%Sep 13, 2017
- Medium6.1Microsoft Exchange Server 2010 SP3, Exchange Server 2013 SP3, Exchange Server 2013 CU16, and Exchange Server 2016 CU5 allows an open redirect vulnerability that could…Check if you run itEPSS 3.17%Jul 11, 2017
- Medium6.1CVE-2017-8560 is listed by inventory_critical.Check if you run itEPSS 3.42%Jul 11, 2017
- Medium6.1CVE-2017-8559 is listed by inventory_critical.Check if you run itEPSS 3.42%Jul 11, 2017