Skip to contentMicrosoft Exchange Server vulnerabilities
- microsoft exchange serverAn elevation of privilege vulnerability exists when Microsoft Exchange Outlook Web Access (OWA)...CVE-2018-84485.4 Medium
- microsoft exchange serverA remote code execution vulnerability exists in the way Microsoft Exchange software parses...CVE-2018-8265EPSS 19.3%7.8 High
- microsoft exchange serverRollup 18 for Microsoft Exchange Server 2010 SP3 and previous versions has an SSRF vulnerability...CVE-2018-16793EPSS 11.3%8.6 High
- microsoft exchange serverA tampering vulnerability exists when Microsoft Exchange Server fails to properly handle profile...CVE-2018-83744.3 Medium
- microsoft exchange serverA remote code execution vulnerability exists in Microsoft Exchange software when the software...CVE-2018-8302EPSS 27.1%9.8 Critical
- microsoft exchange serverAn elevation of privilege vulnerability exists when Microsoft Exchange Outlook Web Access (OWA)...CVE-2018-81595.4 Medium
- microsoft exchange serverA remote code execution vulnerability exists in Microsoft Exchange software when the software...CVE-2018-8154EPSS 23.6%9.8 Critical
- microsoft exchange serverA spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access (OWA) fails...CVE-2018-81535.4 Medium
- microsoft exchange serverAn elevation of privilege vulnerability exists when Microsoft Exchange Outlook Web Access (OWA)...CVE-2018-81525.4 Medium
- microsoft exchange serverAn information disclosure vulnerability exists when Microsoft Exchange improperly handles objects...CVE-2018-81514.3 Medium
- microsoft exchange server, intune endpoint protection, forefront endpoint protection +6 more +8 moreA remote code execution vulnerability exists when the Microsoft Malware Protection Engine does...CVE-2018-0986Public exploitEPSS 63.3%8.8 High
- microsoft exchange serverMicrosoft Exchange Server 2016 Cumulative Update 7 and Microsoft Exchange Server 2016 Cumulative...CVE-2018-0941EPSS 12.5%5.5 Medium
- microsoft exchange server, microsoft corporation exchange outlook web access (owa) +1 moreMicrosoft Exchange Outlook Web Access (OWA) in Microsoft Exchange Server 2010 Service Pack 3...CVE-2018-09406.5 Medium
- microsoft exchange serverMicrosoft Exchange Server 2010 Service Pack 3 Update Rollup 20, Microsoft Exchange Server 2013...CVE-2018-09246.5 Medium
- microsoft exchange serverMicrosoft Exchange Server 2016 CU5 and Microsoft Exchange Server 2016 CU5 allow a spoofing...CVE-2017-119328.1 High
- microsoft exchange server, exchange server 2016 +1 moreMicrosoft Exchange Server 2016 allows an elevation of privilege vulnerability when Microsoft...CVE-2017-87586.1 Medium
- microsoft exchange serverMicrosoft Exchange Server 2013 and Microsoft Exchange Server 2016 allow an input sanitization...CVE-2017-117615.3 Medium
- microsoft exchange server, microsoft corporation exchange server 2010 sp3, exchange server 2013 sp3, exchange server 2013 cu16, and exchange server 2016 cu5. +1 moreMicrosoft Exchange Server 2010 SP3, Exchange Server 2013 SP3, Exchange Server 2013 CU16, and...CVE-2017-86216.1 Medium
- microsoft exchange server, microsoft corporation exchange server 2010 sp3, exchange server 2013 sp3, exchange server 2013 cu16, and exchange server 2016 cu5. +1 moreMicrosoft Exchange Server 2010 SP3, Exchange Server 2013 SP3, Exchange Server 2013 CU16, and...CVE-2017-85606.1 Medium
- microsoft exchange server, microsoft corporation exchange server 2010 sp3, exchange server 2013 sp3, exchange server 2013 cu16, and exchange server 2016 cu5. +1 moreMicrosoft Exchange Server 2010 SP3, Exchange Server 2013 SP3, Exchange Server 2013 CU16, and...CVE-2017-85596.1 Medium
- microsoft exchange server, malware protection engine, endpoint protection +6 more +8 moreThe Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on...CVE-2017-8540In KEVPublic exploitEPSS 71.9%7.8 High
- microsoft exchange server, microsoft corporation malware protection engine, microsoft endpoint protection +5 more +7 moreThe Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on...CVE-2017-8537Public exploitEPSS 16.8%5.5 Medium
- microsoft exchange server, microsoft corporation malware protection engine, microsoft endpoint protection +5 more +7 moreThe Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on...CVE-2017-8536Public exploitEPSS 16.8%5.5 Medium
- microsoft exchange server, microsoft corporation malware protection engine, microsoft endpoint protection +5 more +7 moreThe Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on...CVE-2017-8535Public exploitEPSS 16.8%5.5 Medium
- microsoft exchange serverCross-site scripting (XSS) vulnerability in Microsoft Exchange Outlook Web Access (OWA) allows...CVE-2017-01106.1 Medium
- microsoft exchange serverCross-site scripting (XSS) vulnerability in Microsoft Exchange Server 2016 Cumulative Update 1...CVE-2016-33796.1 Medium
- microsoft exchange serverOpen redirect vulnerability in Microsoft Exchange Server 2013 SP1, 2013 Cumulative Update 12,...CVE-2016-3378EPSS 15.3%7.4 High
- microsoft exchange serverMicrosoft Exchange Server 2007 SP3, 2010 SP3, 2013 SP1, 2013 Cumulative Update 12, 2013...CVE-2016-0138EPSS 13.5%4.3 Medium
- microsoft exchange serverCross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) in Microsoft Exchange Server...CVE-2016-00326.1 Medium
- microsoft exchange serverCross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) in Microsoft Exchange Server...CVE-2016-00316.1 Medium
- microsoft exchange serverCross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) in Microsoft Exchange Server...CVE-2016-00306.1 Medium
- microsoft exchange serverCross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) in Microsoft Exchange Server...CVE-2016-00296.1 Medium
- microsoft exchange serverCross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) in Microsoft Exchange Server...CVE-2015-25444.3 Medium
- microsoft exchange serverCross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) in Microsoft Exchange Server...CVE-2015-25434.3 Medium
- microsoft exchange serverOutlook Web Access (OWA) in Microsoft Exchange Server 2013 Cumulative Update 8 and 9 and SP1...CVE-2015-2505EPSS 18.2%5.0 Medium
- microsoft exchange serverCross-site scripting (XSS) vulnerability in the web applications in Microsoft Exchange Server...CVE-2015-2359EPSS 11.1%4.3 Medium
- microsoft exchange serverCross-site request forgery (CSRF) vulnerability in the web applications in Microsoft Exchange...CVE-2015-17716.8 Medium
- microsoft exchange serverThe web applications in Microsoft Exchange Server 2013 SP1 and Cumulative Update 8 allow remote...CVE-2015-1764EPSS 13.5%4.3 Medium
- microsoft exchange serverCross-site scripting (XSS) vulnerability in errorfe.aspx in Outlook Web App (OWA) in Microsoft...CVE-2015-1632EPSS 11.8%4.3 Medium
- microsoft exchange serverMicrosoft Exchange Server 2013 SP1 and Cumulative Update 7 allows remote attackers to spoof...CVE-2015-16315.0 Medium
- microsoft exchange serverCross-site scripting (XSS) vulnerability in Outlook Web App (OWA) in Microsoft Exchange Server...CVE-2015-16304.3 Medium
- microsoft exchange serverCross-site scripting (XSS) vulnerability in Outlook Web App (OWA) in Microsoft Exchange Server...CVE-2015-16294.3 Medium
- microsoft exchange serverCross-site scripting (XSS) vulnerability in Outlook Web App (OWA) in Microsoft Exchange Server...CVE-2015-16284.3 Medium
- microsoft exchange serverOutlook Web App (OWA) in Microsoft Exchange Server 2013 SP1 and Cumulative Update 6 does not...CVE-2014-63363.5 Low
- microsoft exchange serverCross-site scripting (XSS) vulnerability in Microsoft Exchange Server 2013 SP1 and Cumulative...CVE-2014-63264.3 Medium
- microsoft exchange serverCross-site scripting (XSS) vulnerability in Microsoft Exchange Server 2013 SP1 and Cumulative...CVE-2014-63254.3 Medium
- microsoft exchange serverOutlook Web App (OWA) in Microsoft Exchange Server 2007 SP3, 2010 SP3, and 2013 SP1 and...CVE-2014-63195.0 Medium
- microsoft exchange serverCross-site scripting (XSS) vulnerability in Outlook Web Access in Microsoft Exchange Server 2010...CVE-2013-50724.3 Medium
- oracle fusion middleware, microsoft exchange server +1 moreUnspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion...CVE-2013-04186.8 Medium
- microsoft exchange serverMicrosoft Exchange Server 2007 SP3 and 2010 SP1 and SP2 allows remote authenticated users to...CVE-2012-4791EPSS 13.4%3.5 Low
- Show moreLoading…