Microsoft Exchange Server 2016 Cumulative Update 15 vulnerabilities
7 vulnerabilities
Known vulnerabilities in Microsoft Exchange Server 2016 Cumulative Update 15, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-26857microsoftexchange_server+26KEVRansomware
EPSS score95.76%
Microsoft Exchange Server Remote Code Execution VulnerabilityCVE-2021-26855microsoftexchange_server+24KEVRansomwareEPSS score100.00%
Microsoft Exchange Server Remote Code Execution VulnerabilityCVE-2021-26858microsoftexchange_server+24KEVRansomwareEPSS score93.65%
Microsoft Exchange Server Remote Code Execution VulnerabilityCVE-2021-27065microsoftexchange_server+25KEVRansomwareEPSS score99.88%
Microsoft Exchange Server Remote Code Execution VulnerabilityCVE-2020-0692microsoftexchange_server+5EPSS score3.26%
An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of Privilege Vulnerability'.CVE-2020-0688microsoftexchange_server+6KEVRansomwareEPSS score99.96%
A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka 'Microsoft Exchange Memory Corruption Vulnerability'.CVE-2020-0903microsoftexchange_server+4EPSS score1.65%
A cross-site-scripting (XSS) vulnerability exists when Microsoft Exchange Server does not properly sanitize a specially crafted web request to an affected Exchange server, aka 'Microsoft Exchange Server Spoofing Vulnerability'.