Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| microsoft | exchange server | 2016 | |
| microsoft | exchange server 2016 | 15.01.0.0 – < 15.01.2507.071 | |
| microsoft | exchange server 2019 | 15.02.0.0 – < 15.02.1544.043 | |
| microsoft | exchange server se | 15.02.0.0 – < 15.02.2562.045 | |
| microsoft | exchange server subscription edition | < 15.02.2562.045 | |
| Microsoft | Microsoft Exchange Server 2016 Cumulative Update 23 | 15.01.0.0 – < 15.01.2507.071 | |
| Microsoft | Microsoft Exchange Server 2019 Cumulative Update 14 | 15.02.0.0 – < 15.02.1544.043 | |
| Microsoft | Microsoft Exchange Server 2019 Cumulative Update 15 | 15.02.0.0 – < 15.02.1748.048 | |
| Microsoft | Microsoft Exchange Server Subscription Edition RTM | 15.02.0.0 – < 15.02.2562.045 |
cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_23:*:*:*:*:*:*cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_14:*:*:*:*:*:*cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_15:*:*:*:*:*:*cpe:2.3:a:microsoft:exchange_server_subscription_edition:*:*:*:*:*:*:*:* < 15.02.2562.045Nuestro sensor honeypot gratuito y de código abierto espera en puertos que su servidor no usa y reporta a una lista compartida los escáneres y atacantes que se conectan.