Advisories · Technology

Microsoft Exchange Server 2013 Cumulative Update 23.

Every CVE that names Microsoft Exchange Server 2013 Cumulative Update 23 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-21529 CVE record

CVSS 8.8 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 23
- Microsoft Exchange Server 2016 Cumulative Update 23
- Insecure deserialization
Not analysed yet 14 Feb 2023
CVE-2023-21707 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 23
- Microsoft Exchange Server 2016 Cumulative Update 23
- Insecure deserialization
Not analysed yet 14 Feb 2023
CVE-2023-21706 CVE record

CVSS 8.8 High

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 23
- Microsoft Exchange Server 2016 Cumulative Update 23
- Insecure deserialization
Not analysed yet 14 Feb 2023
CVE-2023-21762 CVE record

CVSS 8.0 High

Microsoft Exchange Server Spoofing Vulnerability
- Microsoft Exchange Server 2016 Cumulative Update 23
- Microsoft Exchange Server 2019 Cumulative Update 12
- Insecure deserialization
Not analysed yet 10 Jan 2023
CVE-2022-41080 CVE record

CVSS 8.8 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware

Microsoft Exchange Server Elevation of Privilege Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 23
- Microsoft Exchange Server 2016 Cumulative Update 22
Not analysed yet 9 Nov 2022
CVE-2022-41079 CVE record

CVSS 8.0 High

Microsoft Exchange Server Spoofing Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 23
- Microsoft Exchange Server 2016 Cumulative Update 22
Not analysed yet 9 Nov 2022
CVE-2022-41078 CVE record

CVSS 8.0 High

Microsoft Exchange Server Spoofing Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 23
- Microsoft Exchange Server 2016 Cumulative Update 22
Not analysed yet 9 Nov 2022
CVE-2022-41082 CVE record

CVSS 8.0 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 23
- Microsoft Exchange Server 2016 Cumulative Update 22
- Insecure deserialization
Not analysed yet 3 Oct 2022
CVE-2022-41040 CVE record

CVSS 8.8 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware

Microsoft Exchange Server Elevation of Privilege Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 23
- Microsoft Exchange Server 2016 Cumulative Update 22
- Server-side request forgery (SSRF)
Not analysed yet 3 Oct 2022
CVE-2022-30134 CVE record

CVSS 6.5 Medium

Microsoft Exchange Server Information Disclosure Vulnerability
- Microsoft Exchange Server 2019 Cumulative Update 12
- Microsoft Exchange Server 2016 Cumulative Update 23
Not analysed yet 9 Aug 2022
CVE-2022-24516 CVE record

CVSS 8.0 High

Microsoft Exchange Server Elevation of Privilege Vulnerability
- Microsoft Exchange Server 2016 Cumulative Update 22
- Microsoft Exchange Server 2019 Cumulative Update 11
Not analysed yet 9 Aug 2022
CVE-2022-24477 CVE record

CVSS 8.0 High

Microsoft Exchange Server Elevation of Privilege Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 23
- Microsoft Exchange Server 2016 Cumulative Update 22
Not analysed yet 9 Aug 2022
CVE-2022-21980 CVE record

CVSS 8.0 High

Microsoft Exchange Server Elevation of Privilege Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 23
- Microsoft Exchange Server 2019 Cumulative Update 11
Not analysed yet 9 Aug 2022
CVE-2022-21979 CVE record

CVSS 4.8 Medium

Microsoft Exchange Server Information Disclosure Vulnerability
- Microsoft Exchange Server 2019 Cumulative Update 11
- Microsoft Exchange Server 2013 Cumulative Update 23
Not analysed yet 9 Aug 2022
CVE-2022-21978 CVE record

CVSS 8.2 High

Microsoft Exchange Server Elevation of Privilege Vulnerability
- Microsoft Exchange Server 2016 Cumulative Update 22
- Microsoft Exchange Server 2019 Cumulative Update 11
Not analysed yet 10 May 2022
CVE-2022-23277 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 23
- Microsoft Exchange Server 2016 Cumulative Update 21
Not analysed yet 9 Mar 2022
CVE-2022-21969 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 23
- Microsoft Exchange Server 2016 Cumulative Update 21
Not analysed yet 11 Jan 2022
CVE-2022-21855 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 23
- Microsoft Exchange Server 2016 Cumulative Update 21
Not analysed yet 11 Jan 2022
CVE-2022-21846 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2016 Cumulative Update 22
- Microsoft Exchange Server 2019 Cumulative Update 11
Not analysed yet 11 Jan 2022
CVE-2021-42305 CVE record

CVSS 6.5 Medium

Microsoft Exchange Server Spoofing Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 23
- Microsoft Exchange Server 2016 Cumulative Update 21
Not analysed yet 10 Nov 2021
CVE-2021-41349 CVE record

CVSS 6.5 Medium

Microsoft Exchange Server Spoofing Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 23
- Microsoft Exchange Server 2016 Cumulative Update 21
Not analysed yet 10 Nov 2021
CVE-2021-26427 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2016 Cumulative Update 22
- Microsoft Exchange Server 2019 Cumulative Update 11
Not analysed yet 13 Oct 2021
CVE-2021-34523 CVE record

CVSS 9.0 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV · ransomware

Microsoft Exchange Server Elevation of Privilege Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 23
- Microsoft Exchange Server 2016 Cumulative Update 19
Not analysed yet 14 Jul 2021
CVE-2021-34473 CVE record

CVSS 9.1 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV · ransomware

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 23
- Microsoft Exchange Server 2016 Cumulative Update 19
- Server-side request forgery (SSRF)
Not analysed yet 14 Jul 2021
CVE-2021-34470 CVE record

CVSS 8.0 High

Microsoft Exchange Server Elevation of Privilege Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 23
- Microsoft Exchange Server 2016 Cumulative Update 21
Not analysed yet 14 Jul 2021
CVE-2021-33766 CVE record

CVSS 7.3 HighCritical · KEV, CVSS 7+ and EPSSKEV

Microsoft Exchange Server Information Disclosure Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 23
- Microsoft Exchange Server 2016 Cumulative Update 19
Not analysed yet 14 Jul 2021
CVE-2021-31206 CVE record

CVSS 7.6 HighCritical · CVSS 7+ and EPSS

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 23
- Microsoft Exchange Server 2016 Cumulative Update 20
Not analysed yet 14 Jul 2021
CVE-2021-31196 CVE record

CVSS 7.2 HighCritical · KEV, CVSS 7+ and EPSSKEV

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 23
- Microsoft Exchange Server 2016 Cumulative Update 20
Not analysed yet 14 Jul 2021
CVE-2021-31209 CVE record

CVSS 6.5 Medium

Microsoft Exchange Server Spoofing Vulnerability
- Microsoft Exchange Server 2019 Cumulative Update 9
- Microsoft Exchange Server 2016 Cumulative Update 20
- Authentication bypass
Not analysed yet 11 May 2021
CVE-2021-31207 CVE record

CVSS 6.6 MediumCritical · KEVKEV · ransomware

Microsoft Exchange Server Security Feature Bypass Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 23
- Microsoft Exchange Server 2019 Cumulative Update 9
- Unrestricted file upload
Not analysed yet 11 May 2021
CVE-2021-31198 CVE record

CVSS 7.8 High

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2019 Cumulative Update 9
- Microsoft Exchange Server 2016 Cumulative Update 20
- Code injection
Not analysed yet 11 May 2021
CVE-2021-31195 CVE record

CVSS 6.5 Medium

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2016 Cumulative Update 19
- Microsoft Exchange Server 2019 Cumulative Update 8
- Authentication bypass
Not analysed yet 11 May 2021
CVE-2021-28483 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2019 Cumulative Update 9
- Microsoft Exchange Server 2016 Cumulative Update 20
Not analysed yet 13 Apr 2021
CVE-2021-28482 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2019 Cumulative Update 9
- Microsoft Exchange Server 2016 Cumulative Update 20
Not analysed yet 13 Apr 2021
CVE-2021-28481 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2019 Cumulative Update 9
- Microsoft Exchange Server 2016 Cumulative Update 20
Not analysed yet 13 Apr 2021
CVE-2021-28480 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 23
- Microsoft Exchange Server 2016 Cumulative Update 19
Not analysed yet 13 Apr 2021
CVE-2021-27078 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 23
- Microsoft Exchange Server 2016 Cumulative Update 18
Not analysed yet 2 Mar 2021
CVE-2021-27065 CVE record

CVSS 7.8 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 21
- Microsoft Exchange Server 2013 Cumulative Update 22
- Path traversal
Not analysed yet 2 Mar 2021
CVE-2021-26858 CVE record

CVSS 7.8 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 21
- Microsoft Exchange Server 2013 Cumulative Update 22
Not analysed yet 2 Mar 2021
CVE-2021-26857 CVE record

CVSS 7.8 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2010 Service Pack 3
- Microsoft Exchange Server 2013 Cumulative Update 21
- Insecure deserialization
Not analysed yet 2 Mar 2021
CVE-2021-26855 CVE record

CVSS 9.1 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV · ransomware

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 21
- Microsoft Exchange Server 2013 Cumulative Update 22
- Server-side request forgery (SSRF)
Not analysed yet 2 Mar 2021
CVE-2021-26854 CVE record

CVSS 6.6 Medium

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 23
- Microsoft Exchange Server 2016 Cumulative Update 18
Not analysed yet 2 Mar 2021
CVE-2021-26412 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 23
- Microsoft Exchange Server 2016 Cumulative Update 18
Not analysed yet 2 Mar 2021
CVE-2020-17143 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Microsoft Exchange Server Information Disclosure Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 23
- Microsoft Exchange Server 2016 Cumulative Update 17
Not analysed yet 9 Dec 2020
CVE-2020-17142 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Microsoft Exchange Remote Code Execution Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 23
- Microsoft Exchange Server 2016 Cumulative Update 17
Not analysed yet 9 Dec 2020
CVE-2020-17132 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Microsoft Exchange Remote Code Execution Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 23
- Microsoft Exchange Server 2016 Cumulative Update 17
Not analysed yet 9 Dec 2020
CVE-2020-17117 CVE record

CVSS 6.6 Medium

Microsoft Exchange Remote Code Execution Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 23
- Microsoft Exchange Server 2016 Cumulative Update 17
Not analysed yet 9 Dec 2020
CVE-2020-17085 CVE record

CVSS 6.2 Medium

Microsoft Exchange Server Denial of Service Vulnerability
- Microsoft Exchange Server 2019 Cumulative Update 6
- Microsoft Exchange Server 2016 Cumulative Update 17
Not analysed yet 11 Nov 2020
CVE-2020-17084 CVE record

CVSS 8.5 High

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2019 Cumulative Update 6
- Microsoft Exchange Server 2016 Cumulative Update 17
Not analysed yet 11 Nov 2020
CVE-2020-17083 CVE record

CVSS 5.5 Medium

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2019 Cumulative Update 6
- Microsoft Exchange Server 2016 Cumulative Update 17
Not analysed yet 11 Nov 2020
CVE-2020-16969 CVE record

CVSS 7.1 High

Microsoft Exchange Information Disclosure Vulnerability
- Microsoft Exchange Server 2019 Cumulative Update 6
- Microsoft Exchange Server 2016 Cumulative Update 17
Not analysed yet 16 Oct 2020