Microsoft Exchange Server vulnerabilities, page 2
254 vulnerabilities
Known vulnerabilities in Microsoft Exchange Server, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2013-5072microsoftexchange_server
EPSS score8.88%
Cross-site scripting (XSS) vulnerability in Outlook Web Access in Microsoft Exchange Server 2010 SP2 and SP3 and 2013 Cumulative Update 2 and 3 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "OWA XSS Vulnerability."CVE-2021-1730microsoftexchange_server+2EPSS score1.82%
<p>A spoofing vulnerability exists in Microsoft Exchange Server which could result in an attack that would allow a malicious actor to impersonate the user.</p>
<p>This update addresses this vulnerability.</p>
<p>To prevent these types of attacks, Microsoft recommends customers to download inline images from different DNSdomains than the rest of OWA. Please see further instructions in the FAQ to put in place this mitigations.</p>CVE-2021-41350microsoftexchange_server+4EPSS score1.91%
Microsoft Exchange Server Spoofing VulnerabilityCVE-2021-41349microsoftexchange_server+5EPSS score93.50%
Microsoft Exchange Server Spoofing VulnerabilityCVE-2021-41348microsoftexchange_server+4EPSS score0.59%
Microsoft Exchange Server Elevation of Privilege VulnerabilityCVE-2021-26857microsoftexchange_server+26KEVRansomwareEPSS score95.76%
Microsoft Exchange Server Remote Code Execution VulnerabilityCVE-2021-26412microsoftexchange_server+5EPSS score33.76%
Microsoft Exchange Server Remote Code Execution VulnerabilityCVE-2021-26855microsoftexchange_server+24KEVRansomwareEPSS score100.00%
Microsoft Exchange Server Remote Code Execution VulnerabilityCVE-2021-26858microsoftexchange_server+24KEVRansomwareEPSS score93.65%
Microsoft Exchange Server Remote Code Execution VulnerabilityCVE-2021-26427microsoftexchange_server+5EPSS score0.89%
Microsoft Exchange Server Remote Code Execution VulnerabilityCVE-2021-26854microsoftexchange_server+5EPSS score24.74%
Microsoft Exchange Server Remote Code Execution VulnerabilityCVE-2021-42305microsoftexchange_server+5EPSS score7.87%
Microsoft Exchange Server Spoofing VulnerabilityCVE-2021-42321microsoftexchange_server+4KEVRansomwareEPSS score91.74%
Microsoft Exchange Server Remote Code Execution VulnerabilityCVE-2021-31209microsoftexchange_server+5EPSS score2.63%
Microsoft Exchange Server Spoofing VulnerabilityCVE-2021-31196microsoftexchange_server+5KEVEPSS score54.06%
Microsoft Exchange Server Remote Code Execution VulnerabilityCVE-2021-31198microsoftexchange_server+5EPSS score4.87%
Microsoft Exchange Server Remote Code Execution VulnerabilityCVE-2021-31206microsoftexchange_server+5EPSS score13.01%
Microsoft Exchange Server Remote Code Execution VulnerabilityCVE-2021-31195microsoftexchange_server+5EPSS score73.68%
Microsoft Exchange Server Remote Code Execution VulnerabilityCVE-2021-31207microsoftexchange_server+5KEVRansomwareEPSS score99.78%
Microsoft Exchange Server Security Feature Bypass VulnerabilityCVE-2021-27078microsoftexchange_server+5EPSS score21.59%
Microsoft Exchange Server Remote Code Execution Vulnerability