# Microsoft Exchange Server 2013 Cumulative Update 23.

Every CVE that names Microsoft Exchange Server 2013 Cumulative Update 23 among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Microsoft Exchange Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-21529.md)
  `CVE-2023-21529` · CVE record: Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 and 3 more · CVSS 8.8 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV, ransomware · EPSS 0.59 · Not analysed yet · Published 14 Feb 2023 · Tags: Insecure deserialization
- [Microsoft Exchange Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-21707.md)
  `CVE-2023-21707` · CVE record: Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 and 3 more · CVSS 8.8 High · Critical (CVSS 7+ and EPSS) · EPSS 0.80 · Not analysed yet · Published 14 Feb 2023 · Tags: Insecure deserialization
- [Microsoft Exchange Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-21706.md)
  `CVE-2023-21706` · CVE record: Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 and 3 more · CVSS 8.8 High · Not analysed yet · Published 14 Feb 2023 · Tags: Insecure deserialization
- [Microsoft Exchange Server Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2023-21762.md)
  `CVE-2023-21762` · CVE record: Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 and 3 more · CVSS 8.0 High · Not analysed yet · Published 10 Jan 2023 · Tags: Insecure deserialization
- [Microsoft Exchange Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-41080.md)
  `CVE-2022-41080` · CVE record: Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 and 4 more · CVSS 8.8 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV, ransomware · EPSS 0.77 · Not analysed yet · Published 9 Nov 2022
- [Microsoft Exchange Server Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2022-41079.md)
  `CVE-2022-41079` · CVE record: Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 and 4 more · CVSS 8.0 High · Not analysed yet · Published 9 Nov 2022
- [Microsoft Exchange Server Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2022-41078.md)
  `CVE-2022-41078` · CVE record: Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 and 4 more · CVSS 8.0 High · Not analysed yet · Published 9 Nov 2022
- [Microsoft Exchange Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-41082.md)
  `CVE-2022-41082` · CVE record: Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 and 4 more · CVSS 8.0 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV, ransomware · EPSS 1.00 · Not analysed yet · Published 3 Oct 2022 · Tags: Insecure deserialization
- [Microsoft Exchange Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-41040.md)
  `CVE-2022-41040` · CVE record: Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 and 4 more · CVSS 8.8 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV, ransomware · EPSS 1.00 · Not analysed yet · Published 3 Oct 2022 · Tags: Server-side request forgery (SSRF)
- [Microsoft Exchange Server Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2022-30134.md)
  `CVE-2022-30134` · CVE record: Microsoft Microsoft Exchange Server 2019 Cumulative Update 12 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 9 Aug 2022
- [Microsoft Exchange Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-24516.md)
  `CVE-2022-24516` · CVE record: Microsoft Microsoft Exchange Server 2016 Cumulative Update 22 and 4 more · CVSS 8.0 High · Not analysed yet · Published 9 Aug 2022
- [Microsoft Exchange Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-24477.md)
  `CVE-2022-24477` · CVE record: Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 and 4 more · CVSS 8.0 High · Not analysed yet · Published 9 Aug 2022
- [Microsoft Exchange Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-21980.md)
  `CVE-2022-21980` · CVE record: Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 and 4 more · CVSS 8.0 High · Not analysed yet · Published 9 Aug 2022
- [Microsoft Exchange Server Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2022-21979.md)
  `CVE-2022-21979` · CVE record: Microsoft Microsoft Exchange Server 2019 Cumulative Update 11 and 4 more · CVSS 4.8 Medium · Not analysed yet · Published 9 Aug 2022
- [Microsoft Exchange Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-21978.md)
  `CVE-2022-21978` · CVE record: Microsoft Microsoft Exchange Server 2016 Cumulative Update 22 and 4 more · CVSS 8.2 High · Not analysed yet · Published 10 May 2022
- [Microsoft Exchange Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-23277.md)
  `CVE-2022-23277` · CVE record: Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 and 4 more · CVSS 8.8 High · Critical (CVSS 7+ and EPSS) · EPSS 0.41 · Not analysed yet · Published 9 Mar 2022
- [Microsoft Exchange Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-21969.md)
  `CVE-2022-21969` · CVE record: Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 and 4 more · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Jan 2022
- [Microsoft Exchange Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-21855.md)
  `CVE-2022-21855` · CVE record: Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 and 4 more · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Jan 2022
- [Microsoft Exchange Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-21846.md)
  `CVE-2022-21846` · CVE record: Microsoft Microsoft Exchange Server 2016 Cumulative Update 22 and 4 more · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Jan 2022
- [Microsoft Exchange Server Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2021-42305.md)
  `CVE-2021-42305` · CVE record: Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 10 Nov 2021
- [Microsoft Exchange Server Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2021-41349.md)
  `CVE-2021-41349` · CVE record: Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 and 4 more · CVSS 6.5 Medium · EPSS 0.93 · Not analysed yet · Published 10 Nov 2021
- [Microsoft Exchange Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2021-26427.md)
  `CVE-2021-26427` · CVE record: Microsoft Microsoft Exchange Server 2016 Cumulative Update 22 and 4 more · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2021
- [Microsoft Exchange Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2021-34523.md)
  `CVE-2021-34523` · CVE record: Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 and 4 more · CVSS 9.0 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV, ransomware · EPSS 1.00 · Not analysed yet · Published 14 Jul 2021
- [Microsoft Exchange Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2021-34473.md)
  `CVE-2021-34473` · CVE record: Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 and 4 more · CVSS 9.1 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV, ransomware · EPSS 1.00 · Not analysed yet · Published 14 Jul 2021 · Tags: Server-side request forgery (SSRF)
- [Microsoft Exchange Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2021-34470.md)
  `CVE-2021-34470` · CVE record: Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 and 2 more · CVSS 8.0 High · Not analysed yet · Published 14 Jul 2021
- [Microsoft Exchange Server Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2021-33766.md)
  `CVE-2021-33766` · CVE record: Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 and 4 more · CVSS 7.3 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.98 · Not analysed yet · Published 14 Jul 2021
- [Microsoft Exchange Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2021-31206.md)
  `CVE-2021-31206` · CVE record: Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 and 4 more · CVSS 7.6 High · Critical (CVSS 7+ and EPSS) · EPSS 0.13 · Not analysed yet · Published 14 Jul 2021
- [Microsoft Exchange Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2021-31196.md)
  `CVE-2021-31196` · CVE record: Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 and 4 more · CVSS 7.2 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.54 · Not analysed yet · Published 14 Jul 2021
- [Microsoft Exchange Server Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2021-31209.md)
  `CVE-2021-31209` · CVE record: Microsoft Microsoft Exchange Server 2019 Cumulative Update 9 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 11 May 2021 · Tags: Authentication bypass
- [Microsoft Exchange Server Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2021-31207.md)
  `CVE-2021-31207` · CVE record: Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 and 4 more · CVSS 6.6 Medium · Critical (KEV) · In CISA KEV, ransomware · EPSS 1.00 · Not analysed yet · Published 11 May 2021 · Tags: Unrestricted file upload
- [Microsoft Exchange Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2021-31198.md)
  `CVE-2021-31198` · CVE record: Microsoft Microsoft Exchange Server 2019 Cumulative Update 9 and 4 more · CVSS 7.8 High · Not analysed yet · Published 11 May 2021 · Tags: Code injection
- [Microsoft Exchange Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2021-31195.md)
  `CVE-2021-31195` · CVE record: Microsoft Microsoft Exchange Server 2016 Cumulative Update 19 and 4 more · CVSS 6.5 Medium · EPSS 0.74 · Not analysed yet · Published 11 May 2021 · Tags: Authentication bypass
- [Microsoft Exchange Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2021-28483.md)
  `CVE-2021-28483` · CVE record: Microsoft Microsoft Exchange Server 2019 Cumulative Update 9 and 4 more · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Apr 2021
- [Microsoft Exchange Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2021-28482.md)
  `CVE-2021-28482` · CVE record: Microsoft Microsoft Exchange Server 2019 Cumulative Update 9 and 4 more · CVSS 8.8 High · Critical (CVSS 7+ and EPSS) · EPSS 0.83 · Not analysed yet · Published 13 Apr 2021
- [Microsoft Exchange Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2021-28481.md)
  `CVE-2021-28481` · CVE record: Microsoft Microsoft Exchange Server 2019 Cumulative Update 9 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.36 · Not analysed yet · Published 13 Apr 2021
- [Microsoft Exchange Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2021-28480.md)
  `CVE-2021-28480` · CVE record: Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.71 · Not analysed yet · Published 13 Apr 2021
- [Microsoft Exchange Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2021-27078.md)
  `CVE-2021-27078` · CVE record: Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 and 4 more · CVSS 9.1 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.22 · Not analysed yet · Published 2 Mar 2021
- [Microsoft Exchange Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2021-27065.md)
  `CVE-2021-27065` · CVE record: Microsoft Microsoft Exchange Server 2013 Cumulative Update 21 and 4 more · CVSS 7.8 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV, ransomware · EPSS 1.00 · Not analysed yet · Published 2 Mar 2021 · Tags: Path traversal
- [Microsoft Exchange Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2021-26858.md)
  `CVE-2021-26858` · CVE record: Microsoft Microsoft Exchange Server 2013 Cumulative Update 21 and 4 more · CVSS 7.8 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV, ransomware · EPSS 0.94 · Not analysed yet · Published 2 Mar 2021
- [Microsoft Exchange Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2021-26857.md)
  `CVE-2021-26857` · CVE record: Microsoft Microsoft Exchange Server 2010 Service Pack 3 and 4 more · CVSS 7.8 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV, ransomware · EPSS 0.96 · Not analysed yet · Published 2 Mar 2021 · Tags: Insecure deserialization
- [Microsoft Exchange Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2021-26855.md)
  `CVE-2021-26855` · CVE record: Microsoft Microsoft Exchange Server 2013 Cumulative Update 21 and 4 more · CVSS 9.1 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV, ransomware · EPSS 1.00 · Not analysed yet · Published 2 Mar 2021 · Tags: Server-side request forgery (SSRF)
- [Microsoft Exchange Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2021-26854.md)
  `CVE-2021-26854` · CVE record: Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 and 4 more · CVSS 6.6 Medium · EPSS 0.25 · Not analysed yet · Published 2 Mar 2021
- [Microsoft Exchange Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2021-26412.md)
  `CVE-2021-26412` · CVE record: Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 and 4 more · CVSS 9.1 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.34 · Not analysed yet · Published 2 Mar 2021
- [Microsoft Exchange Server Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2020-17143.md)
  `CVE-2020-17143` · CVE record: Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 and 4 more · CVSS 8.8 High · Critical (CVSS 7+ and EPSS) · EPSS 0.71 · Not analysed yet · Published 9 Dec 2020
- [Microsoft Exchange Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2020-17142.md)
  `CVE-2020-17142` · CVE record: Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 and 4 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Dec 2020
- [Microsoft Exchange Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2020-17132.md)
  `CVE-2020-17132` · CVE record: Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 and 4 more · CVSS 9.1 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.90 · Not analysed yet · Published 9 Dec 2020
- [Microsoft Exchange Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2020-17117.md)
  `CVE-2020-17117` · CVE record: Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 and 4 more · CVSS 6.6 Medium · EPSS 0.49 · Not analysed yet · Published 9 Dec 2020
- [Microsoft Exchange Server Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2020-17085.md)
  `CVE-2020-17085` · CVE record: Microsoft Microsoft Exchange Server 2019 Cumulative Update 6 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 11 Nov 2020
- [Microsoft Exchange Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2020-17084.md)
  `CVE-2020-17084` · CVE record: Microsoft Microsoft Exchange Server 2019 Cumulative Update 6 and 4 more · CVSS 8.5 High · Not analysed yet · Published 11 Nov 2020
- [Microsoft Exchange Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2020-17083.md)
  `CVE-2020-17083` · CVE record: Microsoft Microsoft Exchange Server 2019 Cumulative Update 6 and 4 more · CVSS 5.5 Medium · EPSS 0.12 · Not analysed yet · Published 11 Nov 2020
- [Microsoft Exchange Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2020-16969.md)
  `CVE-2020-16969` · CVE record: Microsoft Microsoft Exchange Server 2019 Cumulative Update 6 and 4 more · CVSS 7.1 High · Not analysed yet · Published 16 Oct 2020

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=microsoft-exchange-server-2013-cumulative-update-23>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/microsoft-exchange-server-2013-cumulative-update-23/>. Everything for agents: <https://agentprime.io/llms.txt>.