Skip to contentMicrosoft Exchange vulnerabilities
- microsoft exchange serverMicrosoft Exchange Server 2013 SP1 and Cumulative Update 7 allows remote attackers to spoof...CVE-2015-16315.0 Medium
- microsoft exchange serverCross-site scripting (XSS) vulnerability in Outlook Web App (OWA) in Microsoft Exchange Server...CVE-2015-16304.3 Medium
- microsoft exchange serverCross-site scripting (XSS) vulnerability in Outlook Web App (OWA) in Microsoft Exchange Server...CVE-2015-16294.3 Medium
- microsoft exchange serverCross-site scripting (XSS) vulnerability in Outlook Web App (OWA) in Microsoft Exchange Server...CVE-2015-16284.3 Medium
- microsoft exchange serverOutlook Web App (OWA) in Microsoft Exchange Server 2013 SP1 and Cumulative Update 6 does not...CVE-2014-63363.5 Low
- microsoft exchange serverCross-site scripting (XSS) vulnerability in Microsoft Exchange Server 2013 SP1 and Cumulative...CVE-2014-63264.3 Medium
- microsoft exchange serverCross-site scripting (XSS) vulnerability in Microsoft Exchange Server 2013 SP1 and Cumulative...CVE-2014-63254.3 Medium
- microsoft exchange serverOutlook Web App (OWA) in Microsoft Exchange Server 2007 SP3, 2010 SP3, and 2013 SP1 and...CVE-2014-63195.0 Medium
- microsoft exchange serverCross-site scripting (XSS) vulnerability in Outlook Web Access in Microsoft Exchange Server 2010...CVE-2013-50724.3 Medium
- oracle fusion middleware, microsoft exchange server +1 moreUnspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion...CVE-2013-04186.8 Medium
- microsoft exchange serverMicrosoft Exchange Server 2007 SP3 and 2010 SP1 and SP2 allows remote authenticated users to...CVE-2012-4791EPSS 13.4%3.5 Low
- microsoft exchange serverMicrosoft Exchange Server 2007 SP2 on the x64 platform allows remote authenticated users to cause...CVE-2010-3937EPSS 18.4%4.0 Medium
- microsoft exchange serverMicrosoft Outlook Web Access (OWA) 8.2.254.0, when Internet Explorer 7 on Windows Server 2003 is...CVE-2010-2091Public exploitEPSS 17.9%4.3 Medium
- microsoft exchange server, windows 2000, windows server 2003 +2 more +4 moreThe DNS implementation in smtpsvc.dll before 6.0.2600.5949 in Microsoft Windows 2000 SP4 and...CVE-2010-16906.4 Medium
- microsoft exchange server, windows 2000, windows server 2003 +2 more +4 moreThe DNS implementation in smtpsvc.dll before 6.0.2600.5949 in Microsoft Windows 2000 SP4 and...CVE-2010-16896.4 Medium
- microsoft exchange server, windows 2000, windows 2003 server +3 more +5 moreThe SMTP component in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Server...CVE-2010-0025EPSS 21.5%5.0 Medium
- microsoft exchange server, windows 2000, windows 2003 server +3 more +5 moreThe SMTP component in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Server...CVE-2010-0024EPSS 10.7%5.0 Medium
- microsoft exchange serverThe Electronic Messaging System Microsoft Data Base (EMSMDB32) provider in Microsoft Exchange...CVE-2009-0099EPSS 26.2%5.0 Medium
- microsoft exchange serverMicrosoft Exchange 2000 Server SP3, Exchange Server 2003 SP2, and Exchange Server 2007 SP1 do not...CVE-2009-0098EPSS 24.9%9.3 High
- microsoft exchange serverOpen redirect vulnerability in exchweb/bin/redir.asp in Microsoft Outlook Web Access (OWA) for...CVE-2008-1547Public exploitEPSS 48.1%4.3 Medium
- microsoft exchange server, outlook web access +1 moreCross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) for Exchange Server 2003 SP2...CVE-2008-2248EPSS 24.6%4.3 Medium
- microsoft exchange serverCross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) for Exchange Server 2003 SP2...CVE-2008-2247EPSS 24.6%4.3 Medium
- microsoft malware protection engine, antigen for exchange, antigen for smtp gateway +6 more +8 moreUnspecified vulnerability in Microsoft Malware Protection Engine (mpengine.dll) 1.1.3520.0 and 0...CVE-2008-1438EPSS 12.9%5.0 Medium
- microsoft malware protection engine, antigen for exchange, antigen for smtp gateway +6 more +8 moreUnspecified vulnerability in Microsoft Malware Protection Engine (mpengine.dll) 1.1.3520.0 and 0...CVE-2008-1437EPSS 12.9%5.0 Medium
- microsoft exchange serverInteger overflow in the IMAP (IMAP4) support in Microsoft Exchange Server 2000 SP3 allows remote...CVE-2007-0221EPSS 37.2%7.8 High
- microsoft exchange serverCross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) in Microsoft Exchange Server...CVE-2007-0220EPSS 33.1%6.8 Medium
- microsoft exchange serverMicrosoft Exchange Server 2000 SP3, 2003 SP1 and SP2, and 2007 does not properly decode certain...CVE-2007-0213Public exploitEPSS 68.5%10.0 High
- microsoft exchange serverThe Exchange Collaboration Data Objects (EXCDO) functionality in Microsoft Exchange Server 2000...CVE-2007-0039EPSS 44.6%7.8 High
- microsoft exchange serverCross-site scripting (XSS) vulnerability in Microsoft Exchange Server 2000 SP1 through SP3, when...CVE-2006-1193Public exploitEPSS 39.8%2.6 Low
- microsoft exchange serverUnspecified vulnerability in Microsoft Exchange allows remote attackers to execute arbitrary code...CVE-2006-0027EPSS 78.1%7.5 High
- microsoft office, outlook, exchange server +2 moreUnspecified vulnerability in Microsoft Outlook 2000 through 2003, Exchange 5.0 Server SP2 and 5.5...CVE-2006-0002EPSS 45.6%7.5 High
- microsoft exchange server, windows 2000, windows server 2003 +1 more +3 moreBuffer overflow in Collaboration Data Objects (CDO), as used in Microsoft Windows and Microsoft...CVE-2005-1987EPSS 43.4%7.5 High
- microsoft exchange serverCross-site scripting (XSS) vulnerability in Microsoft Outlook Web Access (OWA) component in...CVE-2005-0563EPSS 14.2%4.3 Medium
- microsoft exchange serverHeap-based buffer overflow in the SvrAppendReceivedChunk function in xlsasink.dll in the SMTP...CVE-2005-0560Public exploitEPSS 73.0%7.5 High
- microsoft exchange serverStack consumption vulnerability in Microsoft Exchange Server 2003 SP1 allows users to cause a...CVE-2005-07385.0 Medium
- microsoft exchange serverMicrosoft Outlook Web Access (OWA), when used with Exchange, allows remote attackers to redirect...CVE-2005-0420Public exploitEPSS 29.1%5.8 Medium
- microsoft exchange server, windows 98, windows 2000 +4 more +6 moreThe OLE component in Windows 98, 2000, XP, and Server 2003, and Exchange Server 5.0 through 2003,...CVE-2005-0044EPSS 33.4%7.5 High
- microsoft exchange server, windows server 2003, windows xp +2 moreThe SMTP (Simple Mail Transfer Protocol) component of Microsoft Windows XP 64-bit Edition,...CVE-2004-0840EPSS 30.2%10.0 High
- microsoft exchange server, windows 2000, windows nt +1 more +3 moreThe Network News Transfer Protocol (NNTP) component of Microsoft Windows NT Server 4.0, Windows...CVE-2004-0574Public exploitEPSS 67.8%10.0 High
- microsoft exchange serverCross-site scripting (XSS) vulnerability in Outlook Web Access for Exchange Server 5.5 Service...CVE-2004-0203EPSS 21.0%4.3 Medium
- microsoft sharepoint services, exchange server, windows server 2003 +2 moreMicrosoft Exchange 2003 and Outlook Web Access (OWA), when configured to use NTLM authentication,...CVE-2003-09046.0 Medium
- microsoft exchange serverThe Internet Mail Service in Exchange Server 5.5 and Exchange 2000 allows remote attackers to...CVE-2003-0714Public exploitEPSS 77.6%7.5 High
- microsoft exchange serverCross-site scripting (XSS) vulnerability in the HTML encoding for the Compose New Message form in...CVE-2003-0712EPSS 19.9%4.3 Medium
- microsoft exchange serverMicrosoft Exchange 2000 allows remote authenticated attackers to cause a denial of service via a...CVE-2002-18762.1 Low
- microsoft exchange serverMicrosoft Exchange 2000, when used with Microsoft Remote Procedure Call (MSRPC), allows remote...CVE-2002-1873EPSS 13.6%5.0 Medium
- microsoft internet information services, exchange server, internet information server +2 moreThe SMTP service in Microsoft Internet Information Services (IIS) 4.0 and 5.0 allows remote...CVE-2002-1790Public exploitEPSS 34.0%5.0 Medium
- microsoft exchange serverBuffer overflow in Internet Mail Connector (IMC) for Microsoft Exchange Server 5.5 allows remote...CVE-2002-0698EPSS 20.3%7.5 High
- microsoft exchange serverThe Store Service in Microsoft Exchange 2000 allows remote attackers to cause a denial of service...CVE-2002-0368EPSS 15.2%5.0 Medium
- rsa securid, microsoft exchange server +1 moreAn interaction between Microsoft Outlook Web Access (OWA) with RSA SecurID allows local users to...CVE-2002-05072.1 Low
- microsoft msn messenger, msn chat control, msn messenger service for exchange +2 moreBuffer overflow in Microsoft MSN Chat ActiveX Control, as used in MSN Messenger 4.5 and 4.6, and...CVE-2002-0155EPSS 24.1%7.5 High
- Show moreLoading…