Microsoft Exchange Server vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
250 matching records
- Medium4.0Microsoft Exchange Server 2007 SP2 on the x64 platform allows remote authenticated users to cause a denial of service (infinite loop and MSExchangeIS outage) via a cra…Check this weekEPSS 18.36%Dec 16, 2010
- Medium4.3Microsoft Outlook Web Access (OWA) 8.2.254.0, when Internet Explorer 7 on Windows Server 2003 is used, does not properly handle the id parameter in a Folder IPF.Note a…Check this weekEPSS 17.94%May 27, 2010
- Medium5.0Microsoft Exchange Server Improper Input ValidationPatch nowKEVEPSS 26.24%Feb 10, 2009
- Critical9.3Microsoft Exchange 2000 Server SP3, Exchange Server 2003 SP2, and Exchange Server 2007 SP1 do not properly interpret Transport Neutral Encapsulation (TNEF) properties,…Check this weekEPSS 24.92%Feb 10, 2009
- Medium4.3Open redirect vulnerability in exchweb/bin/redir.asp in Microsoft Outlook Web Access (OWA) for Exchange Server 2003 SP2 (aka build 6.5.7638) allows remote attackers to…Check this weekEPSS 48.14%Oct 21, 2008
- Medium4.3CVE-2008-2248 is listed by inventory_critical.Check this weekEPSS 24.61%Jul 8, 2008
- Medium4.3CVE-2008-2247 is listed by inventory_critical.Check this weekEPSS 24.56%Jul 8, 2008
- High7.8Integer overflow in the IMAP (IMAP4) support in Microsoft Exchange Server 2000 SP3 allows remote attackers to cause a denial of service (service hang) via crafted lite…Check this weekEPSS 37.24%May 8, 2007
- Medium6.8Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) in Microsoft Exchange Server 2000 SP3, and 2003 SP1 and SP2 allows remote attackers to execute arb…Check this weekEPSS 33.15%May 8, 2007
- Critical10.0Microsoft Exchange Server 2000 SP3, 2003 SP1 and SP2, and 2007 does not properly decode certain MIME encoded e-mails, which allows remote attackers to execute arbitrar…Check this weekEPSS 68.45%May 8, 2007
- High7.8The Exchange Collaboration Data Objects (EXCDO) functionality in Microsoft Exchange Server 2000 SP3, 2003 SP1 and SP2, and 2007 allows remote attackers to cause a deni…Check this weekEPSS 44.57%May 8, 2007
- Low2.6Cross-site scripting (XSS) vulnerability in Microsoft Exchange Server 2000 SP1 through SP3, when running Outlook Web Access (OWA), allows user-assisted remote attacker…Check this weekEPSS 39.78%Jun 13, 2006
- High7.5Unspecified vulnerability in Microsoft Exchange allows remote attackers to execute arbitrary code via e-mail messages with crafted (1) vCal or (2) iCal Calendar properties.Check this weekEPSS 78.68%May 10, 2006
- High7.5Unspecified vulnerability in Microsoft Outlook 2000 through 2003, Exchange 5.0 Server SP2 and 5.5 SP4, Exchange 2000 SP3, and Office allows remote attackers to execute…Check this weekEPSS 45.58%Jan 10, 2006
- High7.5Buffer overflow in Collaboration Data Objects (CDO), as used in Microsoft Windows and Microsoft Exchange Server, allows remote attackers to execute arbitrary code when…Check this weekEPSS 43.45%Oct 13, 2005
- Medium4.3Cross-site scripting (XSS) vulnerability in Microsoft Outlook Web Access (OWA) component in Exchange Server 5.5 allows remote attackers to inject arbitrary web script…Check this weekEPSS 14.22%Jun 14, 2005
- Medium5.0Stack consumption vulnerability in Microsoft Exchange Server 2003 SP1 allows users to cause a denial of service (hang) by deleting or moving a folder with deeply neste…Check if you run itEPSS 4.53%May 2, 2005
- High7.5Heap-based buffer overflow in the SvrAppendReceivedChunk function in xlsasink.dll in the SMTP service of Exchange Server 2000 and 2003 allows remote attackers to execu…Check this weekEPSS 69.48%May 2, 2005
- High7.5The OLE component in Windows 98, 2000, XP, and Server 2003, and Exchange Server 5.0 through 2003, does not properly validate the lengths of messages for certain OLE da…Check this weekEPSS 33.36%May 2, 2005
- Medium5.8Microsoft Outlook Web Access (OWA), when used with Exchange, allows remote attackers to redirect users to arbitrary URLs for login via a link to the owalogon.asp application.Check this weekEPSS 25.56%Apr 27, 2005
- Medium4.3Cross-site scripting (XSS) vulnerability in Outlook Web Access for Exchange Server 5.5 Service Pack 4 allows remote attackers to insert arbitrary script and spoof cont…Check this weekEPSS 20.98%Nov 23, 2004
- Critical10.0The SMTP (Simple Mail Transfer Protocol) component of Microsoft Windows XP 64-bit Edition, Windows Server 2003, Windows Server 2003 64-bit Edition, and the Exchange Ro…Check this weekEPSS 30.29%Nov 3, 2004
- High7.5The Internet Mail Service in Exchange Server 5.5 and Exchange 2000 allows remote attackers to cause a denial of service (memory exhaustion) by directly connecting to t…Check this weekEPSS 77.61%Nov 17, 2003
- Medium4.3Cross-site scripting (XSS) vulnerability in the HTML encoding for the Compose New Message form in Microsoft Exchange Server 5.5 Outlook Web Access (OWA) allows remote…Check this weekEPSS 19.87%Nov 17, 2003
- Low2.1Microsoft Exchange 2000 allows remote authenticated attackers to cause a denial of service via a large number of rapid requests, which consumes all of the licenses tha…Check if you run itEPSS 4.70%Dec 31, 2002