Microsoft Exchange Server Subscription Edition RTM vulnerabilities, page 3
46 vulnerabilities
Known vulnerabilities in Microsoft Exchange Server Subscription Edition RTM, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2026-45504microsoftexchange_server+5
EPSS score0.78%
Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.CVE-2026-45503microsoftexchange_server+5EPSS score0.86%
Improper authorization in Microsoft Exchange Server allows an authorized attacker to disclose information over a network.CVE-2026-45501microsoftexchange_server+5EPSS score0.46%
Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network.CVE-2026-45583microsoftexchange_server+5EPSS score0.70%
Improper control of generation of code ('code injection') in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.CVE-2026-45502microsoftexchange_server+5EPSS score0.64%
Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to disclose information over a network.CVE-2026-96940microsoftexchange_server+5EPSS score0.48%
Weak authentication in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.