Skip to contentMicrosoft Exchange Server 2016 vulnerabilities
- microsoft exchange server, exchange server 2013 cumulative update 23, exchange server 2016 cumulative update 19 +3 more +5 moreMicrosoft Exchange Server Elevation of Privilege VulnerabilityCVE-2021-34523In KEVPublic exploitEPSS 100.0%9.0 Critical
- microsoft exchange server, exchange server 2013 cumulative update 23, exchange server 2016 cumulative update 19 +3 more +5 moreMicrosoft Exchange Server Remote Code Execution VulnerabilityCVE-2021-34473In KEVPublic exploitEPSS 100.0%9.1 Critical
- microsoft exchange server, exchange server 2013 cumulative update 23, exchange server 2016 cumulative update 21 +1 more +3 moreMicrosoft Exchange Server Elevation of Privilege VulnerabilityCVE-2021-34470Public exploit8.0 High
- microsoft exchange server, exchange server 2016 cumulative update 20, exchange server 2016 cumulative update 21 +2 more +4 moreMicrosoft Exchange Server Elevation of Privilege VulnerabilityCVE-2021-337688.0 High
- microsoft exchange server, exchange server 2013 cumulative update 23, exchange server 2016 cumulative update 19 +3 more +5 moreMicrosoft Exchange Server Information Disclosure VulnerabilityCVE-2021-33766In KEVPublic exploitEPSS 98.2%7.3 High
- microsoft exchange server, exchange server 2013 cumulative update 23, exchange server 2016 cumulative update 20 +3 more +5 moreMicrosoft Exchange Server Remote Code Execution VulnerabilityCVE-2021-31206EPSS 12.7%7.6 High
- microsoft exchange server, exchange server 2013 cumulative update 23, exchange server 2016 cumulative update 20 +3 more +5 moreMicrosoft Exchange Server Remote Code Execution VulnerabilityCVE-2021-31196In KEVEPSS 54.1%7.2 High
- microsoft exchange server, exchange server 2013 cumulative update 23, exchange server 2016 cumulative update 19 +3 more +5 moreMicrosoft Exchange Server Spoofing VulnerabilityCVE-2021-312096.5 Medium
- microsoft exchange server, exchange server 2013 cumulative update 23, exchange server 2016 cumulative update 19 +3 more +5 moreMicrosoft Exchange Server Security Feature Bypass VulnerabilityCVE-2021-31207In KEVPublic exploitEPSS 99.8%6.6 Medium
- microsoft exchange server, exchange server 2013 cumulative update 23, exchange server 2016 cumulative update 19 +3 more +5 moreMicrosoft Exchange Server Remote Code Execution VulnerabilityCVE-2021-311987.8 High
- microsoft exchange server, exchange server 2013 cumulative update 23, exchange server 2016 cumulative update 19 +3 more +5 moreMicrosoft Exchange Server Remote Code Execution VulnerabilityCVE-2021-31195EPSS 73.7%6.5 Medium
- microsoft exchange server, exchange server 2013 cumulative update 23, exchange server 2016 cumulative update 19 +3 more +5 moreMicrosoft Exchange Server Remote Code Execution VulnerabilityCVE-2021-284839.0 Critical
- microsoft exchange server, exchange server 2013 cumulative update 23, exchange server 2016 cumulative update 19 +3 more +5 moreMicrosoft Exchange Server Remote Code Execution VulnerabilityCVE-2021-28482Public exploitEPSS 83.2%8.8 High
- microsoft exchange server, exchange server 2013 cumulative update 23, exchange server 2016 cumulative update 19 +3 more +5 moreMicrosoft Exchange Server Remote Code Execution VulnerabilityCVE-2021-28481EPSS 36.2%9.8 Critical
- microsoft exchange server, exchange server 2013 cumulative update 23, exchange server 2016 cumulative update 19 +3 more +5 moreMicrosoft Exchange Server Remote Code Execution VulnerabilityCVE-2021-28480Public exploitEPSS 71.2%9.8 Critical
- microsoft exchange server, exchange server 2013 cumulative update 23, exchange server 2016 cumulative update 18 +3 more +5 moreMicrosoft Exchange Server Remote Code Execution VulnerabilityCVE-2021-27078EPSS 18.0%9.1 Critical
- microsoft exchange server, exchange server 2013 cumulative update 21, exchange server 2013 cumulative update 22 +23 more +25 moreMicrosoft Exchange Server Remote Code Execution VulnerabilityCVE-2021-27065In KEVPublic exploitEPSS 99.9%7.8 High
- microsoft exchange server, exchange server 2013 cumulative update 21, exchange server 2013 cumulative update 22 +22 more +24 moreMicrosoft Exchange Server Remote Code Execution VulnerabilityCVE-2021-26858In KEVEPSS 93.7%7.8 High
- microsoft exchange server, exchange server 2010 service pack 3, exchange server 2013 cumulative update 21 +24 more +26 moreMicrosoft Exchange Server Remote Code Execution VulnerabilityCVE-2021-26857In KEVPublic exploitEPSS 95.8%7.8 High
- microsoft exchange server, exchange server 2013 cumulative update 21, exchange server 2013 cumulative update 22 +22 more +24 moreMicrosoft Exchange Server Remote Code Execution VulnerabilityCVE-2021-26855In KEVPublic exploitEPSS 100.0%9.1 Critical
- microsoft exchange server, exchange server 2013 cumulative update 23, exchange server 2016 cumulative update 18 +3 more +5 moreMicrosoft Exchange Server Remote Code Execution VulnerabilityCVE-2021-26854EPSS 20.7%6.6 Medium
- microsoft exchange server, exchange server 2013 cumulative update 23, exchange server 2016 cumulative update 18 +3 more +5 moreMicrosoft Exchange Server Remote Code Execution VulnerabilityCVE-2021-26412EPSS 28.6%9.1 Critical
- microsoft exchange server, exchange server 2016 cumulative update 18, exchange server 2016 cumulative update 19 +2 more +4 moreMicrosoft Exchange Server Spoofing VulnerabilityCVE-2021-24085Public exploit6.5 Medium
- microsoft exchange server, exchange server 2016 cumulative update 18, exchange server 2019 cumulative update 7 +2 moreMicrosoft Exchange Server Spoofing VulnerabilityCVE-2021-17305.4 Medium
- microsoft exchange server, exchange server 2013 cumulative update 23, exchange server 2016 cumulative update 17 +3 more +5 moreMicrosoft Exchange Server Information Disclosure VulnerabilityCVE-2020-17143EPSS 70.6%8.8 High
- microsoft exchange server, exchange server 2013 cumulative update 23, exchange server 2016 cumulative update 17 +3 more +5 moreMicrosoft Exchange Remote Code Execution VulnerabilityCVE-2020-171429.1 Critical
- microsoft exchange server, exchange server 2016 cumulative update 17, exchange server 2016 cumulative update 18 +2 more +4 moreMicrosoft Exchange Remote Code Execution VulnerabilityCVE-2020-171418.4 High
- microsoft exchange server, exchange server 2013 cumulative update 23, exchange server 2016 cumulative update 17 +3 more +5 moreMicrosoft Exchange Remote Code Execution VulnerabilityCVE-2020-17132Public exploitEPSS 89.5%9.1 Critical
- microsoft exchange server, exchange server 2013 cumulative update 23, exchange server 2016 cumulative update 17 +3 more +5 moreMicrosoft Exchange Remote Code Execution VulnerabilityCVE-2020-17117EPSS 48.9%6.6 Medium
- microsoft exchange server, exchange server 2013 cumulative update 23, exchange server 2016 cumulative update 17 +3 more +5 moreMicrosoft Exchange Server Denial of Service VulnerabilityCVE-2020-170856.2 Medium
- microsoft exchange server, exchange server 2013 cumulative update 23, exchange server 2016 cumulative update 17 +3 more +5 moreMicrosoft Exchange Server Remote Code Execution VulnerabilityCVE-2020-170848.5 High
- microsoft exchange server, exchange server 2013 cumulative update 23, exchange server 2016 cumulative update 17 +3 more +5 moreMicrosoft Exchange Server Remote Code Execution VulnerabilityCVE-2020-17083EPSS 12.0%5.5 Medium
- microsoft exchange server, exchange server 2013 cumulative update 23, exchange server 2016 cumulative update 17 +3 more +5 moreMicrosoft Exchange Information Disclosure VulnerabilityCVE-2020-169697.1 High
- microsoft exchange server, exchange server 2016 cumulative update 16, exchange server 2016 cumulative update 17 +2 more +4 moreMicrosoft Exchange Server Remote Code Execution VulnerabilityCVE-2020-16875Public exploitEPSS 47.1%8.4 High
- microsoft exchange server, exchange server 2016 cumulative update 14, exchange server 2016 cumulative update 15 +2 more +4 moreA cross-site-scripting (XSS) vulnerability exists when Microsoft Exchange Server does not...CVE-2020-09035.4 Medium
- microsoft exchange server, exchange server 2013, exchange server 2016 cumulative update 14 +3 more +5 moreAn elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft...CVE-2020-06928.1 High
- microsoft exchange server, exchange server 2010 service pack 3 update rollup 30, exchange server 2013 +4 more +6 moreA remote code execution vulnerability exists in Microsoft Exchange software when the software...CVE-2020-0688In KEVPublic exploitEPSS 100.0%8.8 High
- microsoft exchange server, exchange server 2013, exchange server 2016 +3 more +5 moreA remote code execution vulnerability exists in Microsoft Exchange through the deserialization of...CVE-2019-1373EPSS 21.7%9.8 Critical
- microsoft exchange server, exchange server 2016, exchange server 2019 +2 moreA spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web App (OWA) fails to...CVE-2019-12666.1 Medium
- microsoft exchange server, exchange server 2016, exchange server 2019 +2 moreA denial of service vulnerability exists in Microsoft Exchange Server software when the software...CVE-2019-12337.5 High
- microsoft exchange server, exchange server 2013, exchange server 2016 +1 more +3 moreA cross-site-scripting (XSS) vulnerability exists when Microsoft Exchange Server does not...CVE-2019-11375.4 Medium
- microsoft exchange server, exchange server 2013, exchange server 2016 +2 moreAn elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft...CVE-2019-11368.1 High
- microsoft outlook, exchange server, lync +11 more +13 moreAn information disclosure vulnerability exists when Exchange allows creation of entities with...CVE-2019-10846.5 Medium
- microsoft exchange server, exchange server 2013, exchange server 2016 +1 more +3 moreA spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access (OWA) fails...CVE-2019-08586.1 Medium
- microsoft exchange server, exchange server 2013, exchange server 2016 +1 more +3 moreA spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access (OWA) fails...CVE-2019-08175.4 Medium
- microsoft exchange server, exchange server 2010, exchange server 2013 +2 more +4 moreAn elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft...CVE-2019-0724EPSS 23.8%8.1 High
- microsoft exchange server, exchange server 2010, exchange server 2013 +2 more +4 moreAn elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft...CVE-2019-06867.4 High
- microsoft exchange server, exchange server 2016 +1 moreMicrosoft Exchange Server 2016 allows an elevation of privilege vulnerability when Microsoft...CVE-2017-87586.1 Medium