Microsoft Exchange Server 2019 Cumulative Update 6 vulnerabilities
14 vulnerabilities
Known vulnerabilities in Microsoft Exchange Server 2019 Cumulative Update 6, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-26857microsoftexchange_server+26KEVRansomware
EPSS score95.76%
Microsoft Exchange Server Remote Code Execution VulnerabilityCVE-2021-26855microsoftexchange_server+24KEVRansomwareEPSS score100.00%
Microsoft Exchange Server Remote Code Execution VulnerabilityCVE-2021-26858microsoftexchange_server+24KEVRansomwareEPSS score93.65%
Microsoft Exchange Server Remote Code Execution VulnerabilityCVE-2021-27065microsoftexchange_server+25KEVRansomwareEPSS score99.88%
Microsoft Exchange Server Remote Code Execution VulnerabilityCVE-2020-16969microsoftexchange_server+5EPSS score2.73%
<p>An information disclosure vulnerability exists in how Microsoft Exchange validates tokens when handling certain messages. An attacker who successfully exploited the vulnerability could use this to gain further information from a user.</p>
<p>To exploit the vulnerability, an attacker could include specially crafted OWA messages that could be loaded, without warning or filtering, from the attacker-controlled URL. This callback vector provides an information disclosure tactic used in web beacons and other types of tracking systems.</p>
<p>The security update corrects the way that Exchange handles these token validations.</p>CVE-2020-16875microsoftexchange_server+4EPSS score46.50%
<p>A remote code execution vulnerability exists in Microsoft Exchange server due to improper validation of cmdlet arguments.</p>
<p>An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the System user. Exploitation of the vulnerability requires an authenticated user in a certain Exchange role to be compromised.</p>
<p>The security update addresses the vulnerability by correcting how Microsoft Exchange handles cmdlet arguments.</p>CVE-2020-17141microsoftexchange_server+4EPSS score6.63%
Microsoft Exchange Remote Code Execution VulnerabilityCVE-2020-17132microsoftexchange_server+5EPSS score89.90%
Microsoft Exchange Remote Code Execution VulnerabilityCVE-2020-17084microsoftexchange_server+5EPSS score3.85%
Microsoft Exchange Server Remote Code Execution VulnerabilityCVE-2020-17085microsoftexchange_server+5EPSS score3.63%
Microsoft Exchange Server Denial of Service VulnerabilityCVE-2020-17142microsoftexchange_server+5EPSS score3.37%
Microsoft Exchange Remote Code Execution VulnerabilityCVE-2020-17117microsoftexchange_server+5EPSS score48.87%
Microsoft Exchange Remote Code Execution VulnerabilityCVE-2020-17143microsoftexchange_server+5EPSS score70.63%
Microsoft Exchange Server Information Disclosure VulnerabilityCVE-2020-17083microsoftexchange_server+5EPSS score11.98%
Microsoft Exchange Server Remote Code Execution Vulnerability