Microsoft Exchange Server 2016 Cumulative Update 14 vulnerabilities

8 vulnerabilities

Known vulnerabilities in Microsoft Exchange Server 2016 Cumulative Update 14, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.8CVE-2021-26857microsoftexchange_server+26KEVRansomware
EPSS score
95.76%
Microsoft Exchange Server Remote Code Execution Vulnerability9.1CVE-2021-26855microsoftexchange_server+24KEVRansomware
EPSS score
100.00%
Microsoft Exchange Server Remote Code Execution Vulnerability7.8CVE-2021-26858microsoftexchange_server+24KEVRansomware
EPSS score
93.65%
Microsoft Exchange Server Remote Code Execution Vulnerability7.8CVE-2021-27065microsoftexchange_server+25KEVRansomware
EPSS score
99.88%
Microsoft Exchange Server Remote Code Execution Vulnerability8.1CVE-2020-0692microsoftexchange_server+5
EPSS score
3.26%
An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of Privilege Vulnerability'.9CVE-2020-0688microsoftexchange_server+6KEVRansomware
EPSS score
99.96%
A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka 'Microsoft Exchange Memory Corruption Vulnerability'.5.4CVE-2020-0903microsoftexchange_server+4
EPSS score
1.65%
A cross-site-scripting (XSS) vulnerability exists when Microsoft Exchange Server does not properly sanitize a specially crafted web request to an affected Exchange server, aka 'Microsoft Exchange Server Spoofing Vulnerability'.9.8CVE-2019-1373microsoftexchange_server+5
EPSS score
21.68%
A remote code execution vulnerability exists in Microsoft Exchange through the deserialization of metadata via PowerShell, aka 'Microsoft Exchange Remote Code Execution Vulnerability'.