CVE-2023-21745 — Deserialization of Untrusted Data in Microsoft Exchange Server 2016 Cumulative Update 23

CWE-502 — Deserialization of Untrusted Data3 documents3 sources
Severity
8.0HIGHCNA
No vector
EPSS
0.4%
top 39.96%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Microsoft Exchange Server 2016 Cumulative Update 23Microsoft Exchange Server 2019 Cumulative Update 11Microsoft Exchange Server 2019 Cumulative Update 12
Timeline
PublishedJan 10
Latest updateJan 11

Description

Microsoft Exchange Server Spoofing Vulnerability Microsoft Exchange Server Spoofing Vulnerability

Affected Packages3 packages

🔴Vulnerability Details

2
GHSA
GHSA-x5p9-xxf9-9475: Microsoft Exchange Server Spoofing Vulnerability↗2023-01-11
▶
CVEList
Microsoft Exchange Server Spoofing Vulnerability↗2023-01-10
▶

📋Vendor Advisories

1
Microsoft
Microsoft Exchange Server Spoofing Vulnerability↗2023-01-10
▶
CVE-2023-21745 — Deserialization of Untrusted Data | cvebase