Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 292

Export CSV
CVE-2018-8581

An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka "Microsoft Exchange Server Elevation of Privilege Vulnerability." This affects Microsoft Exchange Server.

CVSS 3.1 · 7.4 High EPSS 27.6% KEV · Listed
Vendors
Microsoft
Products
Exchange Server
CVE-2023-36439

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS 3.1 · 8 High EPSS 5.0% KEV · Not listed
Vendors
Microsoft
Products
Exchange Server
CVE-2020-17143

Microsoft Exchange Server Information Disclosure Vulnerability

Microsoft Exchange Server Information Disclosure Vulnerability

CVSS 3.1 · 8.8 High EPSS 70.6% KEV · Not listed
Vendors
Microsoft
Products
Exchange Server
CVE-2020-17142

Microsoft Exchange Remote Code Execution Vulnerability

Microsoft Exchange Remote Code Execution Vulnerability

CVSS 3.1 · 9.1 Critical EPSS 3.4% KEV · Not listed
Vendors
Microsoft
Products
Exchange Server
CVE-2020-17141

Microsoft Exchange Remote Code Execution Vulnerability

Microsoft Exchange Remote Code Execution Vulnerability

CVSS 3.1 · 8.4 High EPSS 6.6% KEV · Not listed
Vendors
Microsoft
Products
Exchange Server
CVE-2020-17132

Microsoft Exchange Remote Code Execution Vulnerability

Microsoft Exchange Remote Code Execution Vulnerability

CVSS 3.1 · 9.1 Critical EPSS 89.5% KEV · Not listed
Vendors
Microsoft
Products
Exchange Server
CVE-2020-17117

Microsoft Exchange Remote Code Execution Vulnerability

Microsoft Exchange Remote Code Execution Vulnerability

CVSS 3.1 · 6.6 Medium EPSS 48.9% KEV · Not listed
Vendors
Microsoft
Products
Exchange Server
CVE-2022-23277

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS 3.1 · 8.8 High EPSS 41.1% KEV · Not listed
Vendors
Microsoft
Products
Exchange Server
CVE-2022-34692

Microsoft Exchange Server Information Disclosure Vulnerability

Microsoft Exchange Server Information Disclosure Vulnerability

CVSS 3.1 · 5.3 Medium EPSS 1.8% KEV · Not listed
Vendors
Microsoft
Products
Exchange Server
CVE-2024-26198

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS 3.1 · 8.8 High EPSS 6.8% KEV · Not listed
Vendors
Microsoft
Products
Exchange Server
CVE-2017-0110

Cross-site scripting (XSS) vulnerability in Microsoft Exchange Outlook Web Access (OWA) allows remote attackers to inject arbitrary web script or HTML via a crafted email or chat client, aka "Microsoft Exchange Server Elevation of Privilege Vulnerability."

CVSS 3.0 · 6.1 Medium EPSS 7.9% KEV · Not listed
Vendors
Microsoft
Products
Exchange Server
CVE-2017-8758

Microsoft Exchange Server 2016 allows an elevation of privilege vulnerability when Microsoft Exchange Outlook Web Access (OWA) fails to properly handle web requests, aka "Microsoft Exchange Cross-Site Scripting Vulnerability."

CVSS 3.1 · 6.1 Medium EPSS 3.4% KEV · Not listed
Vendors
Microsoft
Products
Exchange Server
CVE-2017-8621

Microsoft Exchange Server 2010 SP3, Exchange Server 2013 SP3, Exchange Server 2013 CU16, and Exchange Server 2016 CU5 allows an open redirect vulnerability that could lead to spoofing, aka "Microsoft Exchange Open Redirect Vulnerability".

CVSS 3.0 · 6.1 Medium EPSS 3.2% KEV · Not listed
Vendors
Microsoft
Products
Exchange Server
CVE-2017-8560

Microsoft Exchange Server 2010 SP3, Exchange Server 2013 SP3, Exchange Server 2013 CU16, and Exchange Server 2016 CU5 allows an elevation of privilege vulnerability due to the way that Exchange Outlook Web Access (OWA) handles web requests, aka "Microsoft Exchange Cross-Site Scripting Vulnerability". This CVE ID is unique from CVE-2017-8559.

CVSS 3.0 · 6.1 Medium EPSS 3.4% KEV · Not listed
Vendors
Microsoft
Products
Exchange Server
CVE-2017-8559

Microsoft Exchange Server 2010 SP3, Exchange Server 2013 SP3, Exchange Server 2013 CU16, and Exchange Server 2016 CU5 allows an elevation of privilege vulnerability due to the way that Exchange Outlook Web Access (OWA) handles web requests, aka "Microsoft Exchange Cross-Site Scripting Vulnerability". This CVE ID is unique from CVE-2017-8560.

CVSS 3.0 · 6.1 Medium EPSS 3.4% KEV · Not listed
Vendors
Microsoft
Products
Exchange Server