Advisories · Technology
Microsoft Exchange Server 2013.
Every CVE that names Microsoft Exchange Server 2013 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
-
An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of Privilege Vulnerability'.
- Microsoft Exchange Server 2013
- Microsoft Exchange Server 2019 Cumulative Update 3
- CVSS 8.8 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware
Improper authentication in Microsoft Exchange Server 2013 and others
- Microsoft Exchange Server 2013
- Microsoft Exchange Server 2019 Cumulative Update 3
- Authentication bypass
-
A remote code execution vulnerability exists in Microsoft Exchange through the deserialization of metadata via PowerShell, aka 'Microsoft Exchange Remote Code Execution Vulnerability'.
- Microsoft Exchange Server 2019
- Microsoft Exchange Server 2016
-
A cross-site-scripting (XSS) vulnerability exists when Microsoft Exchange Server does not properly sanitize a specially crafted web request to an affected Exchange server, aka 'Microsoft Exchange Ser…
- Microsoft Exchange Server 2016
- Microsoft Exchange Server 2019
-
Microsoft Exchange Server: An elevation of privilege vulnerability exists in Microsoft Exchange Server…
- Microsoft Exchange Server
- Microsoft Exchange Server 2016
-
An information disclosure vulnerability exists when Exchange allows creation of entities with Display Names having non-printable characters.
- Microsoft Exchange Server
- Microsoft Outlook
-
Microsoft Exchange Server: A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access…
- Microsoft Exchange Server
- Microsoft Exchange Server 2016
-
Microsoft Exchange Server: A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access…
- Microsoft Exchange Server
- Microsoft Exchange Server 2016
-
An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of Privilege Vulnerability'.
- Microsoft Exchange Server 2010
- Microsoft Exchange Server 2013
-
An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of Privilege Vulnerability'.
- Microsoft Exchange Server 2010
- Microsoft Exchange Server 2013