Advisories · Technology

Microsoft Exchange Server 2019 Cumulative Update 12.

Every CVE that names Microsoft Exchange Server 2019 Cumulative Update 12 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-36035 CVE record

CVSS 8.0 HighCritical · CVSS 7+ and EPSS

Microsoft Exchange Server Spoofing Vulnerability
- Microsoft Exchange Server 2016 Cumulative Update 23
- Microsoft Exchange Server 2019 Cumulative Update 12
- Insecure deserialization
Not analysed yet 14 Nov 2023
CVE-2023-36039 CVE record

CVSS 8.0 HighCritical · CVSS 7+ and EPSS

Microsoft Exchange Server Spoofing Vulnerability
- Microsoft Exchange Server 2016 Cumulative Update 23
- Microsoft Exchange Server 2019 Cumulative Update 12
- Insecure deserialization
Not analysed yet 14 Nov 2023
CVE-2023-36050 CVE record

CVSS 8.0 HighCritical · CVSS 7+ and EPSS

Microsoft Exchange Server Spoofing Vulnerability
- Microsoft Exchange Server 2019 Cumulative Update 12
- Microsoft Exchange Server 2016 Cumulative Update 23
- Insecure deserialization
Not analysed yet 14 Nov 2023
CVE-2023-36439 CVE record

CVSS 8.0 High

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2016 Cumulative Update 23
- Microsoft Exchange Server 2019 Cumulative Update 13
- Insecure deserialization
Not analysed yet 14 Nov 2023
CVE-2023-36778 CVE record

CVSS 8.0 High

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2019 Cumulative Update 13
- Microsoft Exchange Server 2019 Cumulative Update 12
- CWE-426
Not analysed yet 10 Oct 2023
CVE-2023-36777 CVE record

CVSS 5.7 Medium

Microsoft Exchange Server Information Disclosure Vulnerability
- Microsoft Exchange Server 2019 Cumulative Update 12
- Microsoft Exchange Server 2016 Cumulative Update 23
- Insecure deserialization
Not analysed yet 12 Sept 2023
CVE-2023-36744 CVE record

CVSS 8.0 HighCritical · CVSS 7+ and EPSS

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2019 Cumulative Update 12
- Microsoft Exchange Server 2016 Cumulative Update 23
- Insecure deserialization
Not analysed yet 12 Sept 2023
CVE-2023-36745 CVE record

CVSS 8.0 HighCritical · CVSS 7+ and EPSS

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2019 Cumulative Update 13
- Microsoft Exchange Server 2019 Cumulative Update 12
- Insecure deserialization
Not analysed yet 12 Sept 2023
CVE-2023-36756 CVE record

CVSS 8.0 HighCritical · CVSS 7+ and EPSS

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2016 Cumulative Update 23
- Microsoft Exchange Server 2019 Cumulative Update 13
- Insecure deserialization
Not analysed yet 12 Sept 2023
CVE-2023-36757 CVE record

CVSS 8.0 HighCritical · CVSS 7+ and EPSS

Microsoft Exchange Server Spoofing Vulnerability
- Microsoft Exchange Server 2016 Cumulative Update 23
- Microsoft Exchange Server 2019 Cumulative Update 12
- Insecure deserialization
Not analysed yet 12 Sept 2023
CVE-2023-38181 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Microsoft Exchange Server Spoofing Vulnerability
- Microsoft Exchange Server 2016 Cumulative Update 23
- Microsoft Exchange Server 2019 Cumulative Update 12
- Insecure deserialization
Not analysed yet 8 Aug 2023
CVE-2023-38182 CVE record

CVSS 8.0 High

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2016 Cumulative Update 23
- Microsoft Exchange Server 2019 Cumulative Update 12
- Insecure deserialization
Not analysed yet 8 Aug 2023
CVE-2023-35388 CVE record

CVSS 8.0 High

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2016 Cumulative Update 23
- Microsoft Exchange Server 2019 Cumulative Update 12
- Insecure deserialization
Not analysed yet 8 Aug 2023
CVE-2023-21709 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Microsoft Exchange Server Elevation of Privilege Vulnerability
- Microsoft Exchange Server 2016 Cumulative Update 23
- Microsoft Exchange Server 2019 Cumulative Update 12
- Authentication bypass
Not analysed yet 8 Aug 2023
CVE-2023-38185 CVE record

CVSS 8.8 High

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2016 Cumulative Update 23
- Microsoft Exchange Server 2019 Cumulative Update 12
- Path traversal
Not analysed yet 8 Aug 2023
CVE-2023-35368 CVE record

CVSS 8.8 High

Microsoft Exchange Remote Code Execution Vulnerability
- Microsoft Exchange Server 2016 Cumulative Update 23
- Microsoft Exchange Server 2019 Cumulative Update 12
- CWE-20
Not analysed yet 8 Aug 2023
CVE-2023-32031 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2019 Cumulative Update 12
- Microsoft Exchange Server 2016 Cumulative Update 23
- Insecure deserialization
Not analysed yet 14 Jun 2023
CVE-2023-28310 CVE record

CVSS 8.0 HighCritical · CVSS 7+ and EPSS

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2016 Cumulative Update 23
- Microsoft Exchange Server 2019 Cumulative Update 12
- Insecure deserialization
Not analysed yet 14 Jun 2023
CVE-2023-21710 CVE record

CVSS 7.2 High

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2016 Cumulative Update 23
- Microsoft Exchange Server 2019 Cumulative Update 11
- Insecure deserialization
Not analysed yet 14 Feb 2023
CVE-2023-21529 CVE record

CVSS 8.8 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 23
- Microsoft Exchange Server 2016 Cumulative Update 23
- Insecure deserialization
Not analysed yet 14 Feb 2023
CVE-2023-21707 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 23
- Microsoft Exchange Server 2016 Cumulative Update 23
- Insecure deserialization
Not analysed yet 14 Feb 2023
CVE-2023-21706 CVE record

CVSS 8.8 High

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 23
- Microsoft Exchange Server 2016 Cumulative Update 23
- Insecure deserialization
Not analysed yet 14 Feb 2023
CVE-2023-21764 CVE record

CVSS 7.8 High

Microsoft Exchange Server Elevation of Privilege Vulnerability
- Microsoft Exchange Server 2019 Cumulative Update 11
- Microsoft Exchange Server 2019 Cumulative Update 12
- CWE-426
Not analysed yet 10 Jan 2023
CVE-2023-21763 CVE record

CVSS 7.8 High

Microsoft Exchange Server Elevation of Privilege Vulnerability
- Microsoft Exchange Server 2019 Cumulative Update 11
- Microsoft Exchange Server 2019 Cumulative Update 12
- CWE-426
Not analysed yet 10 Jan 2023
CVE-2023-21762 CVE record

CVSS 8.0 High

Microsoft Exchange Server Spoofing Vulnerability
- Microsoft Exchange Server 2016 Cumulative Update 23
- Microsoft Exchange Server 2019 Cumulative Update 12
- Insecure deserialization
Not analysed yet 10 Jan 2023
CVE-2023-21761 CVE record

CVSS 7.5 High

Microsoft Exchange Server Information Disclosure Vulnerability
- Microsoft Exchange Server 2016 Cumulative Update 23
- Microsoft Exchange Server 2019 Cumulative Update 11
- Server-side request forgery (SSRF)
Not analysed yet 10 Jan 2023
CVE-2023-21745 CVE record

CVSS 8.0 High

Microsoft Exchange Server Spoofing Vulnerability
- Microsoft Exchange Server 2016 Cumulative Update 23
- Microsoft Exchange Server 2019 Cumulative Update 12
- Insecure deserialization
Not analysed yet 10 Jan 2023
CVE-2022-41123 CVE record

CVSS 7.8 High

Microsoft Exchange Server Elevation of Privilege Vulnerability
- Microsoft Exchange Server 2016 Cumulative Update 22
- Microsoft Exchange Server 2016 Cumulative Update 23
Not analysed yet 9 Nov 2022
CVE-2022-41080 CVE record

CVSS 8.8 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware

Microsoft Exchange Server Elevation of Privilege Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 23
- Microsoft Exchange Server 2016 Cumulative Update 22
Not analysed yet 9 Nov 2022
CVE-2022-41079 CVE record

CVSS 8.0 High

Microsoft Exchange Server Spoofing Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 23
- Microsoft Exchange Server 2016 Cumulative Update 22
Not analysed yet 9 Nov 2022
CVE-2022-41078 CVE record

CVSS 8.0 High

Microsoft Exchange Server Spoofing Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 23
- Microsoft Exchange Server 2016 Cumulative Update 22
Not analysed yet 9 Nov 2022
CVE-2022-41082 CVE record

CVSS 8.0 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 23
- Microsoft Exchange Server 2016 Cumulative Update 22
- Insecure deserialization
Not analysed yet 3 Oct 2022
CVE-2022-41040 CVE record

CVSS 8.8 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware

Microsoft Exchange Server Elevation of Privilege Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 23
- Microsoft Exchange Server 2016 Cumulative Update 22
- Server-side request forgery (SSRF)
Not analysed yet 3 Oct 2022
CVE-2022-34692 CVE record

CVSS 5.3 Medium

Microsoft Exchange Server Information Disclosure Vulnerability
- Microsoft Exchange Server 2016 Cumulative Update 23
- Microsoft Exchange Server 2019 Cumulative Update 12
- Information disclosure
Not analysed yet 9 Aug 2022
CVE-2022-30134 CVE record

CVSS 6.5 Medium

Microsoft Exchange Server Information Disclosure Vulnerability
- Microsoft Exchange Server 2019 Cumulative Update 12
- Microsoft Exchange Server 2016 Cumulative Update 23
Not analysed yet 9 Aug 2022
CVE-2022-24516 CVE record

CVSS 8.0 High

Microsoft Exchange Server Elevation of Privilege Vulnerability
- Microsoft Exchange Server 2016 Cumulative Update 22
- Microsoft Exchange Server 2019 Cumulative Update 11
Not analysed yet 9 Aug 2022
CVE-2022-24477 CVE record

CVSS 8.0 High

Microsoft Exchange Server Elevation of Privilege Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 23
- Microsoft Exchange Server 2016 Cumulative Update 22
Not analysed yet 9 Aug 2022
CVE-2022-21980 CVE record

CVSS 8.0 High

Microsoft Exchange Server Elevation of Privilege Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 23
- Microsoft Exchange Server 2019 Cumulative Update 11
Not analysed yet 9 Aug 2022
CVE-2022-21979 CVE record

CVSS 4.8 Medium

Microsoft Exchange Server Information Disclosure Vulnerability
- Microsoft Exchange Server 2019 Cumulative Update 11
- Microsoft Exchange Server 2013 Cumulative Update 23
Not analysed yet 9 Aug 2022
CVE-2022-21978 CVE record

CVSS 8.2 High

Microsoft Exchange Server Elevation of Privilege Vulnerability
- Microsoft Exchange Server 2016 Cumulative Update 22
- Microsoft Exchange Server 2019 Cumulative Update 11
Not analysed yet 10 May 2022