CVE-2023-36039 — Deserialization of Untrusted Data in Microsoft Exchange Server 2016 Cumulative Update 23

CWE-502 — Deserialization of Untrusted Data2 documents2 sources
Severity
8.0HIGHCNA
No vector
EPSS
4.1%
top 11.40%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Microsoft Exchange Server 2016 Cumulative Update 23Microsoft Exchange Server 2019 Cumulative Update 12Microsoft Exchange Server 2019 Cumulative Update 13
Timeline
PublishedNov 14

Description

Microsoft Exchange Server Spoofing Vulnerability Microsoft Exchange Server Spoofing Vulnerability

Affected Packages3 packages

🔴Vulnerability Details

1
CVEList
Microsoft Exchange Server Spoofing Vulnerability↗2023-11-14
▶

📋Vendor Advisories

1
Microsoft
Microsoft Exchange Server Spoofing Vulnerability↗2023-11-14
▶
CVE-2023-36039 — Deserialization of Untrusted Data | cvebase