Microsoft Exchange Server vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
250 matching records
- Medium6.1Cross-site scripting (XSS) vulnerability in Microsoft Exchange Outlook Web Access (OWA) allows remote attackers to inject arbitrary web script or HTML via a crafted em…Check if you run itEPSS 7.02%Mar 17, 2017
- Medium6.1Cross-site scripting (XSS) vulnerability in Microsoft Exchange Server 2016 Cumulative Update 1 and 2 allows remote attackers to inject arbitrary web script or HTML via…Check if you run itEPSS 8.23%Sep 14, 2016
- High7.4Open redirect vulnerability in Microsoft Exchange Server 2013 SP1, 2013 Cumulative Update 12, 2013 Cumulative Update 13, 2016 Cumulative Update 1, and 2016 Cumulative…Check this weekEPSS 15.28%Sep 14, 2016
- Medium4.3Microsoft Exchange Server 2007 SP3, 2010 SP3, 2013 SP1, 2013 Cumulative Update 12, 2013 Cumulative Update 13, 2016 Cumulative Update 1, and 2016 Cumulative Update 2 mi…Check this weekEPSS 13.46%Sep 14, 2016
- Medium6.1Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) in Microsoft Exchange Server 2013 PS1, 2013 Cumulative Update 10, 2013 Cumulative Update 11, and 2…Check if you run itEPSS 7.58%Jan 13, 2016
- Medium6.1CVE-2016-0031 is listed by inventory_critical.Check if you run itEPSS 7.65%Jan 13, 2016
- Medium6.1Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) in Microsoft Exchange Server 2013 PS1, 2013 Cumulative Update 10, and 2016 allows remote attackers…Check if you run itEPSS 7.58%Jan 13, 2016
- Medium6.1CVE-2016-0029 is listed by inventory_critical.Check if you run itEPSS 7.58%Jan 13, 2016
- Medium4.3Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) in Microsoft Exchange Server 2013 Cumulative Update 8 and 9 and SP1 allows remote attackers to inj…Check if you run itEPSS 9.48%Sep 9, 2015
- Medium4.3Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) in Microsoft Exchange Server 2013 Cumulative Update 8 and 9 allows remote attackers to inject arbi…Check if you run itEPSS 9.48%Sep 9, 2015
- Medium5.0Outlook Web Access (OWA) in Microsoft Exchange Server 2013 Cumulative Update 8 and 9 and SP1 allows remote attackers to obtain sensitive stacktrace information via a c…Check this weekEPSS 18.24%Sep 9, 2015
- Medium4.3Cross-site scripting (XSS) vulnerability in the web applications in Microsoft Exchange Server 2013 Cumulative Update 8 allows remote attackers to inject arbitrary web…Check this weekEPSS 11.09%Jun 10, 2015
- Medium6.8Cross-site request forgery (CSRF) vulnerability in the web applications in Microsoft Exchange Server 2013 SP1 and Cumulative Update 8 allows remote attackers to hijack…Check if you run itEPSS 5.75%Jun 10, 2015
- Medium4.3The web applications in Microsoft Exchange Server 2013 SP1 and Cumulative Update 8 allow remote attackers to bypass the Same Origin Policy and send HTTP traffic to int…Check this weekEPSS 13.47%Jun 10, 2015
- Medium4.3Cross-site scripting (XSS) vulnerability in errorfe.aspx in Outlook Web App (OWA) in Microsoft Exchange Server 2013 SP1 and Cumulative Update 7 allows remote attackers…Check this weekEPSS 11.79%Mar 11, 2015
- Medium5.0Microsoft Exchange Server 2013 SP1 and Cumulative Update 7 allows remote attackers to spoof meeting organizers via unspecified vectors, aka "Exchange Forged Meeting Re…Check if you run itEPSS 9.15%Mar 11, 2015
- Medium4.3Cross-site scripting (XSS) vulnerability in Outlook Web App (OWA) in Microsoft Exchange Server 2013 SP1 and Cumulative Update 7 allows remote attackers to inject arbit…Check if you run itEPSS 8.88%Mar 11, 2015
- Medium4.3Cross-site scripting (XSS) vulnerability in Outlook Web App (OWA) in Microsoft Exchange Server 2013 SP1 and Cumulative Update 7 allows remote attackers to inject arbit…Check if you run itEPSS 8.88%Mar 11, 2015
- Medium4.3Cross-site scripting (XSS) vulnerability in Outlook Web App (OWA) in Microsoft Exchange Server 2013 SP1 and Cumulative Update 7 allows remote attackers to inject arbit…Check if you run itEPSS 8.88%Mar 11, 2015
- Low3.5Outlook Web App (OWA) in Microsoft Exchange Server 2013 SP1 and Cumulative Update 6 does not properly validate redirection tokens, which allows remote attackers to red…Check if you run itEPSS 7.07%Dec 11, 2014
- Medium4.3CVE-2014-6326 is listed by inventory_critical.Check if you run itEPSS 8.72%Dec 11, 2014
- Medium4.3CVE-2014-6325 is listed by inventory_critical.Check if you run itEPSS 8.72%Dec 11, 2014
- Medium5.0Outlook Web App (OWA) in Microsoft Exchange Server 2007 SP3, 2010 SP3, and 2013 SP1 and Cumulative Update 6 does not properly validate tokens in requests, which allows…Check if you run itEPSS 9.70%Dec 11, 2014
- Medium4.3Cross-site scripting (XSS) vulnerability in Outlook Web Access in Microsoft Exchange Server 2010 SP2 and SP3 and 2013 Cumulative Update 2 and 3 allows remote attackers…Check if you run itEPSS 8.88%Dec 11, 2013
- Low3.5Microsoft Exchange Server 2007 SP3 and 2010 SP1 and SP2 allows remote authenticated users to cause a denial of service (Information Store service hang) by subscribing…Check this weekEPSS 13.44%Dec 12, 2012