7.1Hoch
Microsoft Exchange Server Spoofing Vulnerability
Microsoft Microsoft Exchange Server Subscription Edition RTM
Improper access control in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network.
Microsoft Exchange Server Schwachstellen
Für Microsoft Microsoft Exchange Server veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.
CVEs gesamt182
Letzte 30 Tage15
Kritisch20
Ausgenutzt20
8.8Hoch
Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft Microsoft Exchange Server Subscription Edition RTM
Improper input validation in Microsoft Exchange Server allows an authorized attacker to execute code over a network.
7.2Hoch
Microsoft Exchange Server Elevation of Privilege Vulnerability
Microsoft Microsoft Exchange Server Subscription Edition RTM
Weak authentication in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
8.8Hoch
Microsoft Exchange Server Elevation of Privilege Vulnerability
Microsoft Microsoft Exchange Server Subscription Edition RTM
Reliance on untrusted inputs in a security decision in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
7.5Hoch
Microsoft Exchange Server Denial of Service Vulnerability
Microsoft Microsoft Exchange Server Subscription Edition RTM
Inefficient algorithmic complexity in Microsoft Exchange Server allows an unauthorized attacker to deny service over a network.
6.5Mittel
Microsoft Exchange Server Spoofing Vulnerability
Microsoft Microsoft Exchange Server Subscription Edition RTM
Cross-site request forgery (csrf) in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
7.2Hoch
Microsoft Exchange Server Elevation of Privilege Vulnerability
Microsoft Microsoft Exchange Server Subscription Edition RTM
External control of file name or path in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
8.8Hoch
Microsoft Exchange Server Elevation of Privilege Vulnerability
Microsoft Microsoft Exchange Server Subscription Edition RTM
Authorization bypass through user-controlled key in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
8.8Hoch
Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft Microsoft Exchange Server Subscription Edition RTM
Improper control of generation of code ('code injection') in Microsoft Exchange Server allows an authorized attacker to execute code over a network.
7.5Hoch
Microsoft Exchange Server Elevation of Privilege Vulnerability
Microsoft Microsoft Exchange Server 2016 Cumulative Update 23; Microsoft Microsoft Exchange Server 2019 Cumulative Update 14; Microsoft Microsoft Exchange Server 2019 Cumulative Update 15; Microsoft Microsoft Exchange Server Subscription Edition RTM
Improper verification of cryptographic signature in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
7.8Hoch
Microsoft Exchange Server Elevation of Privilege Vulnerability
Microsoft Microsoft Exchange Server 2016 Cumulative Update 23; Microsoft Microsoft Exchange Server 2019 Cumulative Update 14; Microsoft Microsoft Exchange Server 2019 Cumulative Update 15; Microsoft Microsoft Exchange Server Subscription Edition RTM
Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.
7.8Hoch
Microsoft Exchange Server Elevation of Privilege Vulnerability
Microsoft Microsoft Exchange Server 2016 Cumulative Update 23; Microsoft Microsoft Exchange Server 2019 Cumulative Update 14; Microsoft Microsoft Exchange Server Subscription Edition RTM
Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.
2.3%EPSS
8.8Hoch
Microsoft Exchange Server Elevation of Privilege Vulnerability
Microsoft Microsoft Exchange Server 2016 Cumulative Update 23; Microsoft Microsoft Exchange Server 2019 Cumulative Update 14; Microsoft Microsoft Exchange Server 2019 Cumulative Update 15; Microsoft Microsoft Exchange Server Subscription Edition RTM
Incorrect authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
8.1Hoch
Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft Microsoft Exchange Server 2016 Cumulative Update 23; Microsoft Microsoft Exchange Server 2019 Cumulative Update 14; Microsoft Microsoft Exchange Server 2019 Cumulative Update 15; Microsoft Microsoft Exchange Server Subscription Edition RTM
Stack-based buffer overflow in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.
1.4%EPSS
9.3Kritisch
Microsoft Exchange Server Spoofing Vulnerability
Microsoft Microsoft Exchange Server 2016 Cumulative Update 23; Microsoft Microsoft Exchange Server 2019 Cumulative Update 14; Microsoft Microsoft Exchange Server 2019 Cumulative Update 15; Microsoft Microsoft Exchange Server Subscription Edition RTM
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
1.3%EPSS
8.8Hoch
Microsoft Exchange Server Elevation of Privilege Vulnerability
Microsoft Microsoft Exchange Server 2016 Cumulative Update 23; Microsoft Microsoft Exchange Server 2019 Cumulative Update 14; Microsoft Microsoft Exchange Server 2019 Cumulative Update 15; Microsoft Microsoft Exchange Server Subscription Edition RTM
Weak authentication in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
2.7%EPSS
9.1Kritisch
Microsoft Exchange Server Elevation of Privilege Vulnerability
Microsoft Microsoft Exchange Server 2016 Cumulative Update 23; Microsoft Microsoft Exchange Server 2019 Cumulative Update 14; Microsoft Microsoft Exchange Server 2019 Cumulative Update 15; Microsoft Microsoft Exchange Server Subscription Edition RTM
Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
5.9Mittel
Microsoft Exchange Server Information Disclosure Vulnerability
Microsoft Microsoft Exchange Server 2016 Cumulative Update 23; Microsoft Microsoft Exchange Server 2019 Cumulative Update 14; Microsoft Microsoft Exchange Server 2019 Cumulative Update 15; Microsoft Microsoft Exchange Server Subscription Edition RTM
Use of a broken or risky cryptographic algorithm in Microsoft Exchange Server allows an unauthorized attacker to disclose information over a network.
8.1Hoch
Microsoft Exchange Server Elevation of Privilege Vulnerability
Microsoft Microsoft Exchange Server 2016 Cumulative Update 23; Microsoft Microsoft Exchange Server 2019 Cumulative Update 14; Microsoft Microsoft Exchange Server 2019 Cumulative Update 15; Microsoft Microsoft Exchange Server Subscription Edition RTM
Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
7.5Hoch
Microsoft Exchange Server Denial of Service Vulnerability
Microsoft Microsoft Exchange Server 2016 Cumulative Update 23; Microsoft Microsoft Exchange Server 2019 Cumulative Update 14; Microsoft Microsoft Exchange Server 2019 Cumulative Update 15; Microsoft Microsoft Exchange Server Subscription Edition RTM
Uncontrolled recursion in Microsoft Exchange Server allows an unauthorized attacker to deny service over a network.
1.2%EPSS
6.5Mittel
Microsoft Exchange Server Tampering Vulnerability
Microsoft Microsoft Exchange Server 2016 Cumulative Update 23; Microsoft Microsoft Exchange Server 2019 Cumulative Update 14; Microsoft Microsoft Exchange Server 2019 Cumulative Update 15; Microsoft Microsoft Exchange Server Subscription Edition RTM
Authorization bypass through user-controlled key in Microsoft Exchange Server allows an authorized attacker to perform tampering over a network.
6.5Mittel
Microsoft Exchange Server Spoofing Vulnerability
Microsoft Microsoft Exchange Server 2016 Cumulative Update 23; Microsoft Microsoft Exchange Server 2019 Cumulative Update 14; Microsoft Microsoft Exchange Server 2019 Cumulative Update 15; Microsoft Microsoft Exchange Server Subscription Edition RTM
Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network.
9.3Kritisch
Microsoft Exchange Server Spoofing Vulnerability
Microsoft Microsoft Exchange Server 2016 Cumulative Update 23; Microsoft Microsoft Exchange Server 2019 Cumulative Update 14; Microsoft Microsoft Exchange Server 2019 Cumulative Update 15; Microsoft Microsoft Exchange Server Subscription Edition RTM
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
8.8Hoch
Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft Microsoft Exchange Server 2016 Cumulative Update 23; Microsoft Microsoft Exchange Server 2019 Cumulative Update 14; Microsoft Microsoft Exchange Server 2019 Cumulative Update 15; Microsoft Microsoft Exchange Server Subscription Edition RTM
External control of file name or path in Microsoft Exchange Server allows an authorized attacker to execute code over a network.
8.1Hoch
Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft Microsoft Exchange Server 2019 Cumulative Update 14; Microsoft Microsoft Exchange Server 2019 Cumulative Update 15; Microsoft Microsoft Exchange Server Subscription Edition RTM
Double free in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.
Die Liste enthält alle Einträge seit Anfang 2025 sowie ältere Einträge für dieses Produkt.