Advisories · Technology
Microsoft Exchange Server 2016.
Every CVE that names Microsoft Exchange Server 2016 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
-
A remote code execution vulnerability exists in Microsoft Exchange through the deserialization of metadata via PowerShell, aka 'Microsoft Exchange Remote Code Execution Vulnerability'.
- Microsoft Exchange Server 2019
- Microsoft Exchange Server 2016
-
A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web App (OWA) fails to properly handle web requests, aka 'Microsoft Exchange Spoofing Vulnerability'.
- Microsoft Exchange Server 2016
- Microsoft Exchange Server 2019
-
A denial of service vulnerability exists in Microsoft Exchange Server software when the software fails to properly handle objects in memory, aka 'Microsoft Exchange Denial of Service Vulnerability'.
- Microsoft Exchange Server 2016
- Microsoft Exchange Server 2019
-
A cross-site-scripting (XSS) vulnerability exists when Microsoft Exchange Server does not properly sanitize a specially crafted web request to an affected Exchange server, aka 'Microsoft Exchange Ser…
- Microsoft Exchange Server 2016
- Microsoft Exchange Server 2019
-
Microsoft Exchange Server: An elevation of privilege vulnerability exists in Microsoft Exchange Server…
- Microsoft Exchange Server
- Microsoft Exchange Server 2016
-
An information disclosure vulnerability exists when Exchange allows creation of entities with Display Names having non-printable characters.
- Microsoft Exchange Server
- Microsoft Outlook
-
Microsoft Exchange Server: A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access…
- Microsoft Exchange Server
- Microsoft Exchange Server 2016
-
Microsoft Exchange Server: A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access…
- Microsoft Exchange Server
- Microsoft Exchange Server 2016
-
An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of Privilege Vulnerability'.
- Microsoft Exchange Server 2010
- Microsoft Exchange Server 2013
-
An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of Privilege Vulnerability'.
- Microsoft Exchange Server 2010
- Microsoft Exchange Server 2013