Microsoft Exchange Server 2013 Cumulative Update 23 vulnerabilities, page 2

51 vulnerabilities

Known vulnerabilities in Microsoft Exchange Server 2013 Cumulative Update 23, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8CVE-2021-34470microsoftexchange_server+3
EPSS score
4.38%
Microsoft Exchange Server Elevation of Privilege Vulnerability
9CVE-2021-34523microsoftexchange_server+5KEVRansomware
EPSS score
99.99%
Microsoft Exchange Server Elevation of Privilege Vulnerability
10CVE-2021-34473microsoftexchange_server+5KEVRansomware
EPSS score
100.00%
Microsoft Exchange Server Remote Code Execution Vulnerability
7.3CVE-2021-33766microsoftexchange_server+5KEV
EPSS score
98.18%
Microsoft Exchange Server Information Disclosure Vulnerability
7.1CVE-2020-16969microsoftexchange_server+5
EPSS score
2.73%
<p>An information disclosure vulnerability exists in how Microsoft Exchange validates tokens when handling certain messages. An attacker who successfully exploited the vulnerability could use this to gain further information from a user.</p> <p>To exploit the vulnerability, an attacker could include specially crafted OWA messages that could be loaded, without warning or filtering, from the attacker-controlled URL. This callback vector provides an information disclosure tactic used in web beacons and other types of tracking systems.</p> <p>The security update corrects the way that Exchange handles these token validations.</p>
9.1CVE-2020-17132microsoftexchange_server+5
EPSS score
89.90%
Microsoft Exchange Remote Code Execution Vulnerability
9CVE-2020-17084microsoftexchange_server+5
EPSS score
3.85%
Microsoft Exchange Server Remote Code Execution Vulnerability
6.2CVE-2020-17085microsoftexchange_server+5
EPSS score
3.63%
Microsoft Exchange Server Denial of Service Vulnerability
9.1CVE-2020-17142microsoftexchange_server+5
EPSS score
3.37%
Microsoft Exchange Remote Code Execution Vulnerability
9CVE-2020-17117microsoftexchange_server+5
EPSS score
48.87%
Microsoft Exchange Remote Code Execution Vulnerability
8.8CVE-2020-17143microsoftexchange_server+5
EPSS score
70.63%
Microsoft Exchange Server Information Disclosure Vulnerability
5.5CVE-2020-17083microsoftexchange_server+5
EPSS score
11.98%
Microsoft Exchange Server Remote Code Execution Vulnerability
9CVE-2022-21855microsoftexchange_server+5
EPSS score
0.93%
Microsoft Exchange Server Remote Code Execution Vulnerability
9CVE-2022-21969microsoftexchange_server+5
EPSS score
1.12%
Microsoft Exchange Server Remote Code Execution Vulnerability
9CVE-2022-21846microsoftexchange_server+5
EPSS score
1.06%
Microsoft Exchange Server Remote Code Execution Vulnerability
4.8CVE-2022-21979microsoftexchange_server+5
EPSS score
2.16%
Microsoft Exchange Server Information Disclosure Vulnerability
8CVE-2022-21980microsoftexchange_server+5
EPSS score
2.66%
Microsoft Exchange Server Elevation of Privilege Vulnerability
8.2CVE-2022-21978microsoftexchange_server+5
EPSS score
0.87%
Microsoft Exchange Server Elevation of Privilege Vulnerability
8.8CVE-2022-41040microsoftexchange_server+5KEVRansomware
EPSS score
99.96%
Microsoft Exchange Server Elevation of Privilege Vulnerability
8CVE-2022-41079microsoftexchange_server+5
EPSS score
0.84%
Microsoft Exchange Server Spoofing Vulnerability