Skip to contentMicrosoft Exchange vulnerabilities
- microsoft exchange server, exchange server 2013, exchange server 2016 +1 more +3 moreA cross-site-scripting (XSS) vulnerability exists when Microsoft Exchange Server does not...CVE-2019-11375.4 Medium
- microsoft exchange server, exchange server 2013, exchange server 2016 +2 moreAn elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft...CVE-2019-11368.1 High
- microsoft outlook, exchange server, lync +11 more +13 moreAn information disclosure vulnerability exists when Exchange allows creation of entities with...CVE-2019-10846.5 Medium
- microsoft exchange server, exchange server 2013, exchange server 2016 +1 more +3 moreA spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access (OWA) fails...CVE-2019-08586.1 Medium
- microsoft exchange server, exchange server 2013, exchange server 2016 +1 more +3 moreA spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access (OWA) fails...CVE-2019-08175.4 Medium
- microsoft exchange server, exchange server 2010, exchange server 2013 +2 more +4 moreAn elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft...CVE-2019-0724EPSS 23.8%8.1 High
- microsoft exchange server, exchange server 2010, exchange server 2013 +2 more +4 moreAn elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft...CVE-2019-06867.4 High
- microsoft exchange serverAn information disclosure vulnerability exists when the Microsoft Exchange PowerShell API grants...CVE-2019-05886.5 Medium
- microsoft exchange serverA remote code execution vulnerability exists in Microsoft Exchange software when the software...CVE-2019-0586EPSS 15.4%9.8 Critical
- microsoft exchange serverA tampering vulnerability exists when Microsoft Exchange Server fails to properly handle profile...CVE-2018-86044.3 Medium
- microsoft exchange serverAn elevation of privilege vulnerability exists in Microsoft Exchange Server, aka "Microsoft...CVE-2018-8581In KEVPublic exploitEPSS 27.6%7.4 High
- microsoft exchange serverAn elevation of privilege vulnerability exists when Microsoft Exchange Outlook Web Access (OWA)...CVE-2018-84485.4 Medium
- microsoft exchange serverA remote code execution vulnerability exists in the way Microsoft Exchange software parses...CVE-2018-8265EPSS 19.3%7.8 High
- microsoft exchange serverRollup 18 for Microsoft Exchange Server 2010 SP3 and previous versions has an SSRF vulnerability...CVE-2018-16793EPSS 11.3%8.6 High
- microsoft exchange serverA tampering vulnerability exists when Microsoft Exchange Server fails to properly handle profile...CVE-2018-83744.3 Medium
- microsoft exchange serverA remote code execution vulnerability exists in Microsoft Exchange software when the software...CVE-2018-8302EPSS 27.1%9.8 Critical
- microsoft exchange serverAn elevation of privilege vulnerability exists when Microsoft Exchange Outlook Web Access (OWA)...CVE-2018-81595.4 Medium
- microsoft exchange serverA remote code execution vulnerability exists in Microsoft Exchange software when the software...CVE-2018-8154EPSS 23.6%9.8 Critical
- microsoft exchange serverA spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access (OWA) fails...CVE-2018-81535.4 Medium
- microsoft exchange serverAn elevation of privilege vulnerability exists when Microsoft Exchange Outlook Web Access (OWA)...CVE-2018-81525.4 Medium
- microsoft exchange serverAn information disclosure vulnerability exists when Microsoft Exchange improperly handles objects...CVE-2018-81514.3 Medium
- microsoft exchange server, intune endpoint protection, forefront endpoint protection +6 more +8 moreA remote code execution vulnerability exists when the Microsoft Malware Protection Engine does...CVE-2018-0986Public exploitEPSS 63.3%8.8 High
- microsoft exchange serverMicrosoft Exchange Server 2016 Cumulative Update 7 and Microsoft Exchange Server 2016 Cumulative...CVE-2018-0941EPSS 12.5%5.5 Medium
- microsoft exchange server, microsoft corporation exchange outlook web access (owa) +1 moreMicrosoft Exchange Outlook Web Access (OWA) in Microsoft Exchange Server 2010 Service Pack 3...CVE-2018-09406.5 Medium
- microsoft exchange serverMicrosoft Exchange Server 2010 Service Pack 3 Update Rollup 20, Microsoft Exchange Server 2013...CVE-2018-09246.5 Medium
- microsoft exchange serverMicrosoft Exchange Server 2016 CU5 and Microsoft Exchange Server 2016 CU5 allow a spoofing...CVE-2017-119328.1 High
- microsoft exchange server, exchange server 2016 +1 moreMicrosoft Exchange Server 2016 allows an elevation of privilege vulnerability when Microsoft...CVE-2017-87586.1 Medium
- microsoft exchange serverMicrosoft Exchange Server 2013 and Microsoft Exchange Server 2016 allow an input sanitization...CVE-2017-117615.3 Medium
- microsoft exchange server, microsoft corporation exchange server 2010 sp3, exchange server 2013 sp3, exchange server 2013 cu16, and exchange server 2016 cu5. +1 moreMicrosoft Exchange Server 2010 SP3, Exchange Server 2013 SP3, Exchange Server 2013 CU16, and...CVE-2017-86216.1 Medium
- microsoft exchange server, microsoft corporation exchange server 2010 sp3, exchange server 2013 sp3, exchange server 2013 cu16, and exchange server 2016 cu5. +1 moreMicrosoft Exchange Server 2010 SP3, Exchange Server 2013 SP3, Exchange Server 2013 CU16, and...CVE-2017-85606.1 Medium
- microsoft exchange server, microsoft corporation exchange server 2010 sp3, exchange server 2013 sp3, exchange server 2013 cu16, and exchange server 2016 cu5. +1 moreMicrosoft Exchange Server 2010 SP3, Exchange Server 2013 SP3, Exchange Server 2013 CU16, and...CVE-2017-85596.1 Medium
- microsoft exchange server, malware protection engine, endpoint protection +6 more +8 moreThe Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on...CVE-2017-8540In KEVPublic exploitEPSS 71.9%7.8 High
- microsoft exchange server, microsoft corporation malware protection engine, microsoft endpoint protection +5 more +7 moreThe Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on...CVE-2017-8537Public exploitEPSS 16.8%5.5 Medium
- microsoft exchange server, microsoft corporation malware protection engine, microsoft endpoint protection +5 more +7 moreThe Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on...CVE-2017-8536Public exploitEPSS 16.8%5.5 Medium
- microsoft exchange server, microsoft corporation malware protection engine, microsoft endpoint protection +5 more +7 moreThe Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on...CVE-2017-8535Public exploitEPSS 16.8%5.5 Medium
- microsoft exchange serverCross-site scripting (XSS) vulnerability in Microsoft Exchange Outlook Web Access (OWA) allows...CVE-2017-01106.1 Medium
- microsoft exchange serverCross-site scripting (XSS) vulnerability in Microsoft Exchange Server 2016 Cumulative Update 1...CVE-2016-33796.1 Medium
- microsoft exchange serverOpen redirect vulnerability in Microsoft Exchange Server 2013 SP1, 2013 Cumulative Update 12,...CVE-2016-3378EPSS 15.3%7.4 High
- microsoft exchange serverMicrosoft Exchange Server 2007 SP3, 2010 SP3, 2013 SP1, 2013 Cumulative Update 12, 2013...CVE-2016-0138EPSS 13.5%4.3 Medium
- microsoft exchange serverCross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) in Microsoft Exchange Server...CVE-2016-00326.1 Medium
- microsoft exchange serverCross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) in Microsoft Exchange Server...CVE-2016-00316.1 Medium
- microsoft exchange serverCross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) in Microsoft Exchange Server...CVE-2016-00306.1 Medium
- microsoft exchange serverCross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) in Microsoft Exchange Server...CVE-2016-00296.1 Medium
- microsoft exchange serverCross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) in Microsoft Exchange Server...CVE-2015-25444.3 Medium
- microsoft exchange serverCross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) in Microsoft Exchange Server...CVE-2015-25434.3 Medium
- microsoft exchange serverOutlook Web Access (OWA) in Microsoft Exchange Server 2013 Cumulative Update 8 and 9 and SP1...CVE-2015-2505EPSS 18.2%5.0 Medium
- microsoft exchange serverCross-site scripting (XSS) vulnerability in the web applications in Microsoft Exchange Server...CVE-2015-2359EPSS 11.1%4.3 Medium
- microsoft exchange serverCross-site request forgery (CSRF) vulnerability in the web applications in Microsoft Exchange...CVE-2015-17716.8 Medium
- microsoft exchange serverThe web applications in Microsoft Exchange Server 2013 SP1 and Cumulative Update 8 allow remote...CVE-2015-1764EPSS 13.5%4.3 Medium
- microsoft exchange serverCross-site scripting (XSS) vulnerability in errorfe.aspx in Outlook Web App (OWA) in Microsoft...CVE-2015-1632EPSS 11.8%4.3 Medium
- Show moreLoading…