Microsoft Exchange Server 2013 Cumulative Update 23 vulnerabilities, page 2
51 vulnerabilities
Known vulnerabilities in Microsoft Exchange Server 2013 Cumulative Update 23, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-34470microsoftexchange_server+3
EPSS score4.38%
Microsoft Exchange Server Elevation of Privilege VulnerabilityCVE-2021-34523microsoftexchange_server+5KEVRansomwareEPSS score99.99%
Microsoft Exchange Server Elevation of Privilege VulnerabilityCVE-2021-34473microsoftexchange_server+5KEVRansomwareEPSS score100.00%
Microsoft Exchange Server Remote Code Execution VulnerabilityCVE-2021-33766microsoftexchange_server+5KEVEPSS score98.18%
Microsoft Exchange Server Information Disclosure VulnerabilityCVE-2020-16969microsoftexchange_server+5EPSS score2.73%
<p>An information disclosure vulnerability exists in how Microsoft Exchange validates tokens when handling certain messages. An attacker who successfully exploited the vulnerability could use this to gain further information from a user.</p>
<p>To exploit the vulnerability, an attacker could include specially crafted OWA messages that could be loaded, without warning or filtering, from the attacker-controlled URL. This callback vector provides an information disclosure tactic used in web beacons and other types of tracking systems.</p>
<p>The security update corrects the way that Exchange handles these token validations.</p>CVE-2020-17132microsoftexchange_server+5EPSS score89.90%
Microsoft Exchange Remote Code Execution VulnerabilityCVE-2020-17084microsoftexchange_server+5EPSS score3.85%
Microsoft Exchange Server Remote Code Execution VulnerabilityCVE-2020-17085microsoftexchange_server+5EPSS score3.63%
Microsoft Exchange Server Denial of Service VulnerabilityCVE-2020-17142microsoftexchange_server+5EPSS score3.37%
Microsoft Exchange Remote Code Execution VulnerabilityCVE-2020-17117microsoftexchange_server+5EPSS score48.87%
Microsoft Exchange Remote Code Execution VulnerabilityCVE-2020-17143microsoftexchange_server+5EPSS score70.63%
Microsoft Exchange Server Information Disclosure VulnerabilityCVE-2020-17083microsoftexchange_server+5EPSS score11.98%
Microsoft Exchange Server Remote Code Execution VulnerabilityCVE-2022-21855microsoftexchange_server+5EPSS score0.93%
Microsoft Exchange Server Remote Code Execution VulnerabilityCVE-2022-21969microsoftexchange_server+5EPSS score1.12%
Microsoft Exchange Server Remote Code Execution VulnerabilityCVE-2022-21846microsoftexchange_server+5EPSS score1.06%
Microsoft Exchange Server Remote Code Execution VulnerabilityCVE-2022-21979microsoftexchange_server+5EPSS score2.16%
Microsoft Exchange Server Information Disclosure VulnerabilityCVE-2022-21980microsoftexchange_server+5EPSS score2.66%
Microsoft Exchange Server Elevation of Privilege VulnerabilityCVE-2022-21978microsoftexchange_server+5EPSS score0.87%
Microsoft Exchange Server Elevation of Privilege VulnerabilityCVE-2022-41040microsoftexchange_server+5KEVRansomwareEPSS score99.96%
Microsoft Exchange Server Elevation of Privilege VulnerabilityCVE-2022-41079microsoftexchange_server+5EPSS score0.84%
Microsoft Exchange Server Spoofing Vulnerability