Microsoft Exchange Server (Microsoft) - vulnerabilities (CVEs)
18 CVEs, 0 in the last 30 days, 5 known versions, newest CVE from 2019-07-15. Vendor: Microsoft.
CVEs of Microsoft Exchange Server
- CVE-2019-1136 - CVSS 8.1 (high), 2019-07-15: An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of Privilege Vulnerability'.
- CVE-2019-1084 - CVSS 6.5 (medium), 2019-07-15: An information disclosure vulnerability exists when Exchange allows creation of entities with Display Names having non-printable characters. An authenticated…
- CVE-2019-0858 - CVSS 6.1 (medium), 2019-04-09: A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access (OWA) fails to properly handle web requests, aka 'Microsoft Exchange…
- CVE-2019-0817 - CVSS 5.4 (medium), 2019-04-09: A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access (OWA) fails to properly handle web requests, aka 'Microsoft Exchange…
- CVE-2019-0588 - CVSS 6.5 (medium), 2019-01-08: An information disclosure vulnerability exists when the Microsoft Exchange PowerShell API grants calendar contributors more view permissions than intended,…
- CVE-2019-0586 - CVSS 9.8 (critical), 2019-01-08: A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka "Microsoft…
- CVE-2018-8604 - CVSS 4.3 (medium), 2018-12-12: A tampering vulnerability exists when Microsoft Exchange Server fails to properly handle profile data, aka "Microsoft Exchange Server Tampering…
- CVE-2018-8581 - CVSS 7.4 (high), 2018-11-14: An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka "Microsoft Exchange Server Elevation of Privilege Vulnerability." This…
- CVE-2018-8448 - CVSS 5.4 (medium), 2018-10-10: An elevation of privilege vulnerability exists when Microsoft Exchange Outlook Web Access (OWA) fails to properly handle web requests, aka "Microsoft Exchange…
- CVE-2018-8265 - CVSS 7.8 (high), 2018-10-10: A remote code execution vulnerability exists in the way Microsoft Exchange software parses specially crafted email messages, aka "Microsoft Exchange Remote…
- CVE-2018-8374 - CVSS 4.3 (medium), 2018-08-15: A tampering vulnerability exists when Microsoft Exchange Server fails to properly handle profile data, aka "Microsoft Exchange Server Tampering…
- CVE-2018-8302 - CVSS 9.8 (critical), 2018-08-15: A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka "Microsoft…
- CVE-2018-8153 - CVSS 5.4 (medium), 2018-05-09: A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access (OWA) fails to properly handle web requests, aka "Microsoft Exchange…
- CVE-2018-8152 - CVSS 5.4 (medium), 2018-05-09: An elevation of privilege vulnerability exists when Microsoft Exchange Outlook Web Access (OWA) fails to properly handle web requests, aka "Microsoft Exchange…
- CVE-2018-8159 - CVSS 5.4 (medium), 2018-05-09: An elevation of privilege vulnerability exists when Microsoft Exchange Outlook Web Access (OWA) fails to properly handle web requests, aka "Microsoft Exchange…
- CVE-2018-8151 - CVSS 4.3 (medium), 2018-05-09: An information disclosure vulnerability exists when Microsoft Exchange improperly handles objects in memory, aka "Microsoft Exchange Memory Corruption…
- CVE-2018-8154 - CVSS 9.8 (critical), 2018-05-09: A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka "Microsoft…
- CVE-2018-0986 - CVSS 8.8 (high), 2018-04-04: A remote code execution vulnerability exists when the Microsoft Malware Protection Engine does not properly scan a specially crafted file, leading to memory…
