# Microsoft Exchange Server 2016 Cumulative Update 15.

Every CVE that names Microsoft Exchange Server 2016 Cumulative Update 15 among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Microsoft Exchange Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2021-27065.md)
  `CVE-2021-27065` · CVE record: Microsoft Microsoft Exchange Server 2013 Cumulative Update 21 and 4 more · CVSS 7.8 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV, ransomware · EPSS 1.00 · Not analysed yet · Published 2 Mar 2021 · Tags: Path traversal
- [Microsoft Exchange Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2021-26858.md)
  `CVE-2021-26858` · CVE record: Microsoft Microsoft Exchange Server 2013 Cumulative Update 21 and 4 more · CVSS 7.8 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV, ransomware · EPSS 0.94 · Not analysed yet · Published 2 Mar 2021
- [Microsoft Exchange Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2021-26857.md)
  `CVE-2021-26857` · CVE record: Microsoft Microsoft Exchange Server 2010 Service Pack 3 and 4 more · CVSS 7.8 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV, ransomware · EPSS 0.96 · Not analysed yet · Published 2 Mar 2021 · Tags: Insecure deserialization
- [Microsoft Exchange Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2021-26855.md)
  `CVE-2021-26855` · CVE record: Microsoft Microsoft Exchange Server 2013 Cumulative Update 21 and 4 more · CVSS 9.1 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV, ransomware · EPSS 1.00 · Not analysed yet · Published 2 Mar 2021 · Tags: Server-side request forgery (SSRF)
- [Cross-site scripting in Microsoft Exchange Server 2019 Cumulative Update 4 and others](https://agentprime.io/advisories/CVE-2020-0903.md)
  `CVE-2020-0903` · CVE record: Microsoft Microsoft Exchange Server 2019 Cumulative Update 4 and 3 more · CVSS 5.4 Medium · Not analysed yet · Published 12 Mar 2020 · Tags: Cross-site scripting (XSS)
- [An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of Privilege Vulnerability'.](https://agentprime.io/advisories/CVE-2020-0692.md)
  `CVE-2020-0692` · CVE record: Microsoft Microsoft Exchange Server 2013 and 4 more · No CVSS score · Not analysed yet · Published 11 Feb 2020
- [Improper authentication in Microsoft Exchange Server 2013 and others](https://agentprime.io/advisories/CVE-2020-0688.md)
  `CVE-2020-0688` · CVE record: Microsoft Microsoft Exchange Server 2013 and 4 more · CVSS 8.8 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV, ransomware · EPSS 1.00 · Not analysed yet · Published 11 Feb 2020 · Tags: Authentication bypass

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=microsoft-exchange-server-2016-cumulative-update-15>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/microsoft-exchange-server-2016-cumulative-update-15/>. Everything for agents: <https://agentprime.io/llms.txt>.