Microsoft Corporation Microsoft Exchange Server 2016 Schwachstellen (CVE)

Ohne Score

CVE-2019-1373 vor 7 Jahren

Microsoft Microsoft Exchange Server 2019; Microsoft Microsoft Exchange Server 2016; Microsoft Microsoft Exchange Server 2013; Microsoft Microsoft Exchange Server 2019 Cumulative Update 3

A remote code execution vulnerability exists in Microsoft Exchange through the deserialization of metadata via PowerShell, aka 'Microsoft Exchange Remote Code Execution Vulnerability'.

22%EPSS

Ohne Score

CVE-2019-1266 vor 7 Jahren

Microsoft Microsoft Exchange Server 2016; Microsoft Microsoft Exchange Server 2019

A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web App (OWA) fails to properly handle web requests, aka 'Microsoft Exchange Spoofing Vulnerability'.

2.0%EPSS

Ohne Score

CVE-2019-1233 vor 7 Jahren

Microsoft Microsoft Exchange Server 2016; Microsoft Microsoft Exchange Server 2019

A denial of service vulnerability exists in Microsoft Exchange Server software when the software fails to properly handle objects in memory, aka 'Microsoft Exchange Denial of Service Vulnerability'.

6.2%EPSS

Ohne Score

CVE-2019-1137 vor 7 Jahren

Microsoft Microsoft Exchange Server 2016; Microsoft Microsoft Exchange Server 2019; Microsoft Microsoft Exchange Server 2013

A cross-site-scripting (XSS) vulnerability exists when Microsoft Exchange Server does not properly sanitize a specially crafted web request to an affected Exchange server, aka 'Microsoft Exchange Server Spoofing Vulnerability'.

1.6%EPSS

Ohne Score

CVE-2019-1136 vor 7 Jahren

Microsoft Microsoft Exchange Server; Microsoft Microsoft Exchange Server 2016; Microsoft Microsoft Exchange Server 2013

An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of Privilege Vulnerability'.

3.4%EPSS

Ohne Score

CVE-2019-1084 vor 7 Jahren

Microsoft Microsoft Exchange Server; Microsoft Microsoft Outlook; Microsoft Microsoft Office; Microsoft Microsoft Lync

An information disclosure vulnerability exists when Exchange allows creation of entities with Display Names having non-printable characters. An authenticated attacker could exploit this vulnerability by creating entities with invalid display names, which, whe…

5.3%EPSS

Ohne Score

CVE-2019-0858 vor 7 Jahren

Microsoft Microsoft Exchange Server; Microsoft Microsoft Exchange Server 2016; Microsoft Microsoft Exchange Server 2013; Microsoft Microsoft Exchange Server 2019

A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access (OWA) fails to properly handle web requests, aka 'Microsoft Exchange Spoofing Vulnerability'. This CVE ID is unique from CVE-2019-0817.

2.1%EPSS

Ohne Score

CVE-2019-0817 vor 7 Jahren

Microsoft Microsoft Exchange Server; Microsoft Microsoft Exchange Server 2016; Microsoft Microsoft Exchange Server 2013; Microsoft Microsoft Exchange Server 2019

A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access (OWA) fails to properly handle web requests, aka 'Microsoft Exchange Spoofing Vulnerability'. This CVE ID is unique from CVE-2019-0858.

2.3%EPSS

Ohne Score

CVE-2019-0724 vor 7 Jahren

Microsoft Microsoft Exchange Server 2010; Microsoft Microsoft Exchange Server 2013; Microsoft Microsoft Exchange Server 2016; Microsoft Microsoft Exchange Server 2019

An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0686.

24%EPSS

Ohne Score

CVE-2019-0686 vor 7 Jahren

Microsoft Microsoft Exchange Server 2010; Microsoft Microsoft Exchange Server 2013; Microsoft Microsoft Exchange Server 2016; Microsoft Microsoft Exchange Server 2019

An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0724.

5.1%EPSS

Ohne Score

CVE-2017-8758 vor 9 Jahren

Microsoft Corporation Microsoft Exchange Server 2016

Microsoft Exchange Server 2016 allows an elevation of privilege vulnerability when Microsoft Exchange Outlook Web Access (OWA) fails to properly handle web requests, aka "Microsoft Exchange Cross-Site Scripting Vulnerability."

3.4%EPSS