Advisories · Technology
Microsoft Exchange Server 2019 Cumulative Update 3.
Every CVE that names Microsoft Exchange Server 2019 Cumulative Update 3 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.8 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware
Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 21
- Microsoft Exchange Server 2013 Cumulative Update 22
- Path traversal
- CVSS 7.8 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware
Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 21
- Microsoft Exchange Server 2013 Cumulative Update 22
- CVSS 9.1 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV · ransomware
Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 21
- Microsoft Exchange Server 2013 Cumulative Update 22
- Server-side request forgery (SSRF)
- CVSS 5.4 Medium
Cross-site scripting in Microsoft Exchange Server 2019 Cumulative Update 4 and others
- Microsoft Exchange Server 2019 Cumulative Update 4
- Microsoft Exchange Server 2016 Cumulative Update 15
- Cross-site scripting (XSS)
-
An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of Privilege Vulnerability'.
- Microsoft Exchange Server 2013
- Microsoft Exchange Server 2019 Cumulative Update 3
- CVSS 8.8 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware
Improper authentication in Microsoft Exchange Server 2013 and others
- Microsoft Exchange Server 2013
- Microsoft Exchange Server 2019 Cumulative Update 3
- Authentication bypass
-
A remote code execution vulnerability exists in Microsoft Exchange through the deserialization of metadata via PowerShell, aka 'Microsoft Exchange Remote Code Execution Vulnerability'.
- Microsoft Exchange Server 2019
- Microsoft Exchange Server 2016