Microsoft Exchange Server vulnerabilities

207 known vulnerabilities affecting microsoft/exchange_server.

Total CVEs
207
CISA KEV
19
actively exploited
Public exploits
28
Exploited in wild
19
Severity breakdown
CRITICAL24HIGH84MEDIUM93LOW6

Vulnerabilities

Page 2 of 11
CVE-2023-38185HIGHCVSS 8.8v2016v20192023-08-08
CVE-2023-38185 [HIGH] CWE-23 CVE-2023-38185: Microsoft Exchange Server Remote Code Execution Vulnerability Microsoft Exchange Server Remote Code Execution Vulnerability
nvd
CVE-2023-35388HIGHCVSS 8.0v2016v20192023-08-08
CVE-2023-35388 [HIGH] CWE-502 CVE-2023-35388: Microsoft Exchange Server Remote Code Execution Vulnerability Microsoft Exchange Server Remote Code Execution Vulnerability
nvd
CVE-2023-32031HIGHCVSS 8.8v2016v20192023-06-14
CVE-2023-32031 [HIGH] CWE-502 CVE-2023-32031: Microsoft Exchange Server Remote Code Execution Vulnerability Microsoft Exchange Server Remote Code Execution Vulnerability
nvd
CVE-2023-28310HIGHCVSS 8.0v2016v20192023-06-14
CVE-2023-28310 [HIGH] CWE-502 CVE-2023-28310: Microsoft Exchange Server Remote Code Execution Vulnerability Microsoft Exchange Server Remote Code Execution Vulnerability
nvd
CVE-2023-21529HIGHCVSS 8.8KEVv2013v2016+1 more2023-02-14
CVE-2023-21529 [HIGH] CWE-502 CVE-2023-21529: Microsoft Exchange Server Remote Code Execution Vulnerability Microsoft Exchange Server Remote Code Execution Vulnerability
nvd
CVE-2023-21710HIGHCVSS 7.2v2016v20192023-02-14
CVE-2023-21710 [HIGH] CWE-502 CVE-2023-21710: Microsoft Exchange Server Remote Code Execution Vulnerability Microsoft Exchange Server Remote Code Execution Vulnerability
nvd
CVE-2023-21706HIGHCVSS 8.8v2013v2016+1 more2023-02-14
CVE-2023-21706 [HIGH] CWE-502 CVE-2023-21706: Microsoft Exchange Server Remote Code Execution Vulnerability Microsoft Exchange Server Remote Code Execution Vulnerability
nvd
CVE-2023-21707HIGHCVSS 8.8v2013v2016+1 more2023-02-14
CVE-2023-21707 [HIGH] CWE-502 CVE-2023-21707: Microsoft Exchange Server Remote Code Execution Vulnerability Microsoft Exchange Server Remote Code Execution Vulnerability
nvd
CVE-2023-21764HIGHCVSS 7.8v2016v20192023-01-10
CVE-2023-21764 [HIGH] CWE-426 CVE-2023-21764: Microsoft Exchange Server Elevation of Privilege Vulnerability Microsoft Exchange Server Elevation of Privilege Vulnerability
nvd
CVE-2023-21763HIGHCVSS 7.8v2016v20192023-01-10
CVE-2023-21763 [HIGH] CWE-426 CVE-2023-21763: Microsoft Exchange Server Elevation of Privilege Vulnerability Microsoft Exchange Server Elevation of Privilege Vulnerability
nvd
CVE-2023-21761HIGHCVSS 7.5v2016v20192023-01-10
CVE-2023-21761 [HIGH] CWE-918 CVE-2023-21761: Microsoft Exchange Server Information Disclosure Vulnerability Microsoft Exchange Server Information Disclosure Vulnerability
nvd
CVE-2022-41080CRITICALCVSS 9.8KEVv2013v2016+1 more2022-11-09
CVE-2022-41080 [HIGH] CVE-2022-41080: Microsoft Exchange Server Elevation of Privilege Vulnerability Microsoft Exchange Server Elevation of Privilege Vulnerability
nvd
CVE-2022-41123HIGHCVSS 7.8v2016v20192022-11-09
CVE-2022-41123 [HIGH] CVE-2022-41123: Microsoft Exchange Server Elevation of Privilege Vulnerability Microsoft Exchange Server Elevation of Privilege Vulnerability
nvd
CVE-2022-41082HIGHCVSS 8.0KEVPoCv2013v2016+1 more2022-10-03
CVE-2022-41082 [HIGH] CWE-502 CVE-2022-41082: Microsoft Exchange Server Remote Code Execution Vulnerability Microsoft Exchange Server Remote Code Execution Vulnerability
nvd
CVE-2022-41040HIGHCVSS 8.8KEVPoCv2013v2016+1 more2022-10-03
CVE-2022-41040 [HIGH] CWE-918 CVE-2022-41040: Microsoft Exchange Server Elevation of Privilege Vulnerability Microsoft Exchange Server Elevation of Privilege Vulnerability
nvd
CVE-2022-21980HIGHCVSS 8.0v2013v2016+1 more2022-08-09
CVE-2022-21980 [HIGH] CVE-2022-21980: Microsoft Exchange Server Elevation of Privilege Vulnerability Microsoft Exchange Server Elevation of Privilege Vulnerability
nvd
CVE-2022-24477HIGHCVSS 8.0v2013v2016+1 more2022-08-09
CVE-2022-24477 [HIGH] CVE-2022-24477: Microsoft Exchange Server Elevation of Privilege Vulnerability Microsoft Exchange Server Elevation of Privilege Vulnerability
nvd
CVE-2022-24516HIGHCVSS 8.0v2013v2016+1 more2022-08-09
CVE-2022-24516 [HIGH] CVE-2022-24516: Microsoft Exchange Server Elevation of Privilege Vulnerability Microsoft Exchange Server Elevation of Privilege Vulnerability
nvd
CVE-2022-34692MEDIUMCVSS 5.3v2016v20192022-08-09
CVE-2022-34692 [MEDIUM] CWE-200 CVE-2022-34692: Microsoft Exchange Server Information Disclosure Vulnerability Microsoft Exchange Server Information Disclosure Vulnerability
nvd
CVE-2022-21979MEDIUMCVSS 5.7v2013v2016+1 more2022-08-09
CVE-2022-21979 [MEDIUM] CVE-2022-21979: Microsoft Exchange Server Information Disclosure Vulnerability Microsoft Exchange Server Information Disclosure Vulnerability
nvd