Skip to content
Fencer Intel

All · Microsoft Exchange

Newest first, late arrivals on top. Also a feed.

  1. 9.3
    CVE-2009-0098 Microsoft Exchange 2000 Server SP3, Exchange Server 2003 SP2, and Exchange Server 2007 SP1 do not properly interpret Transport Neutral Enca…
    Microsoft Exchange
    EPSS 24.9% chance of exploitation in 30 days, percentile 97%
  2. 4.3
    CVE-2008-1547 Open redirect vulnerability in exchweb/bin/redir.asp in Microsoft Outlook Web Access (OWA) for Exchange Server 2003 SP2 (aka build 6.5.7638…
    Microsoft Exchange
    1 public exploit EPSS 48.1% chance of exploitation in 30 days, percentile 98%
  3. 4.3
    CVE-2008-2248 Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) for Exchange Server 2003 SP2 allows remote attackers to inject arbitra…
    Microsoft Exchange
    EPSS 24.6% chance of exploitation in 30 days, percentile 97%
  4. 4.3
    CVE-2008-2247 Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) for Exchange Server 2003 SP2 allows remote attackers to inject arbitra…
    Microsoft Exchange
    EPSS 24.6% chance of exploitation in 30 days, percentile 97%
  5. 7.8
    CVE-2007-0221 Integer overflow in the IMAP (IMAP4) support in Microsoft Exchange Server 2000 SP3 allows remote attackers to cause a denial of service (se…
    Microsoft Exchange
    EPSS 37.2% chance of exploitation in 30 days, percentile 98%
  6. 6.8
    CVE-2007-0220 Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) in Microsoft Exchange Server 2000 SP3, and 2003 SP1 and SP2 allows rem…
    Microsoft Exchange
    EPSS 33.1% chance of exploitation in 30 days, percentile 98%
  7. 10.0
    CVE-2007-0213 Microsoft Exchange Server 2000 SP3, 2003 SP1 and SP2, and 2007 does not properly decode certain MIME encoded e-mails, which allows remote a…
    Microsoft Exchange
    1 public exploit EPSS 68.5% chance of exploitation in 30 days, percentile 99.3%
  8. 7.8
    CVE-2007-0039 The Exchange Collaboration Data Objects (EXCDO) functionality in Microsoft Exchange Server 2000 SP3, 2003 SP1 and SP2, and 2007 allows remo…
    Microsoft Exchange
    EPSS 44.6% chance of exploitation in 30 days, percentile 98%
  9. 2.6
    CVE-2006-1193 Cross-site scripting (XSS) vulnerability in Microsoft Exchange Server 2000 SP1 through SP3, when running Outlook Web Access (OWA), allows u…
    Microsoft Exchange
    1 public exploit EPSS 39.8% chance of exploitation in 30 days, percentile 98%
  10. 7.5
    CVE-2006-0027 Unspecified vulnerability in Microsoft Exchange allows remote attackers to execute arbitrary code via e-mail messages with crafted (1) vCal…
    Microsoft Exchange
    1 public exploit EPSS 78.1% chance of exploitation in 30 days, percentile 99.5%
  11. 7.5
    CVE-2006-0002 Unspecified vulnerability in Microsoft Outlook 2000 through 2003, Exchange 5.0 Server SP2 and 5.5 SP4, Exchange 2000 SP3, and Office allows…
    Microsoft Exchange
    EPSS 45.6% chance of exploitation in 30 days, percentile 98%
  12. 7.5
    CVE-2005-1987 Buffer overflow in Collaboration Data Objects (CDO), as used in Microsoft Windows and Microsoft Exchange Server, allows remote attackers to…
    Microsoft Exchange
    EPSS 43.4% chance of exploitation in 30 days, percentile 98%
  13. 4.3
    CVE-2005-0563 Cross-site scripting (XSS) vulnerability in Microsoft Outlook Web Access (OWA) component in Exchange Server 5.5 allows remote attackers to…
    Microsoft Exchange
    EPSS 14.2% chance of exploitation in 30 days, percentile 96%
  14. 7.5
    CVE-2005-0560 Heap-based buffer overflow in the SvrAppendReceivedChunk function in xlsasink.dll in the SMTP service of Exchange Server 2000 and 2003 allo…
    Microsoft Exchange
    1 public exploit EPSS 73.0% chance of exploitation in 30 days, percentile 99.4%
  15. 5.0
    CVE-2005-0738 Stack consumption vulnerability in Microsoft Exchange Server 2003 SP1 allows users to cause a denial of service (hang) by deleting or movin…
    Microsoft Exchange
    EPSS 4.5% chance of exploitation in 30 days, percentile 91%
  16. 5.8
    CVE-2005-0420 Microsoft Outlook Web Access (OWA), when used with Exchange, allows remote attackers to redirect users to arbitrary URLs for login via a li…
    Microsoft Exchange
    1 public exploit EPSS 29.1% chance of exploitation in 30 days, percentile 98%
  17. 7.5
    CVE-2005-0044 The OLE component in Windows 98, 2000, XP, and Server 2003, and Exchange Server 5.0 through 2003, does not properly validate the lengths of…
    Microsoft Exchange
    EPSS 33.4% chance of exploitation in 30 days, percentile 98%
  18. 10.0
    CVE-2004-0840 The SMTP (Simple Mail Transfer Protocol) component of Microsoft Windows XP 64-bit Edition, Windows Server 2003, Windows Server 2003 64-bit…
    Microsoft Exchange
    EPSS 30.2% chance of exploitation in 30 days, percentile 98%
  19. 10.0
    CVE-2004-0574 The Network News Transfer Protocol (NNTP) component of Microsoft Windows NT Server 4.0, Windows 2000 Server, Windows Server 2003, Exchange…
    Microsoft Exchange
    1 public exploit EPSS 67.8% chance of exploitation in 30 days, percentile 99.3%
  20. 4.3
    CVE-2004-0203 Cross-site scripting (XSS) vulnerability in Outlook Web Access for Exchange Server 5.5 Service Pack 4 allows remote attackers to insert arb…
    Microsoft Exchange
    EPSS 21.0% chance of exploitation in 30 days, percentile 97%
  21. 6.0
    CVE-2003-0904 Microsoft Exchange 2003 and Outlook Web Access (OWA), when configured to use NTLM authentication, does not properly reuse HTTP connections,…
    Microsoft Exchange
    EPSS 8.1% chance of exploitation in 30 days, percentile 94%
  22. 7.5
    CVE-2003-0714 The Internet Mail Service in Exchange Server 5.5 and Exchange 2000 allows remote attackers to cause a denial of service (memory exhaustion)…
    Microsoft Exchange
    3 public exploits EPSS 77.6% chance of exploitation in 30 days, percentile 99.5%
  23. 4.3
    CVE-2003-0712 Cross-site scripting (XSS) vulnerability in the HTML encoding for the Compose New Message form in Microsoft Exchange Server 5.5 Outlook Web…
    Microsoft Exchange
    EPSS 19.9% chance of exploitation in 30 days, percentile 97%
  24. 2.1
    CVE-2002-1876 Microsoft Exchange 2000 allows remote authenticated attackers to cause a denial of service via a large number of rapid requests, which cons…
    Microsoft Exchange
    EPSS 4.7% chance of exploitation in 30 days, percentile 91%
  25. 5.0
    CVE-2002-1873 Microsoft Exchange 2000, when used with Microsoft Remote Procedure Call (MSRPC), allows remote attackers to cause a denial of service (cras…
    Microsoft Exchange
    EPSS 13.6% chance of exploitation in 30 days, percentile 96%
  26. 5.0
    CVE-2002-1790 The SMTP service in Microsoft Internet Information Services (IIS) 4.0 and 5.0 allows remote attackers to bypass anti-relaying rules and sen…
    Microsoft Exchange
    1 public exploit EPSS 34.0% chance of exploitation in 30 days, percentile 98%
  27. 7.5
    CVE-2002-0698 Buffer overflow in Internet Mail Connector (IMC) for Microsoft Exchange Server 5.5 allows remote attackers to execute arbitrary code via an…
    Microsoft Exchange
    EPSS 20.3% chance of exploitation in 30 days, percentile 97%
  28. 5.0
    CVE-2002-0368 The Store Service in Microsoft Exchange 2000 allows remote attackers to cause a denial of service (CPU consumption) via a mail message with…
    Microsoft Exchange
    EPSS 15.2% chance of exploitation in 30 days, percentile 96%
  29. 2.1
    CVE-2002-0507 An interaction between Microsoft Outlook Web Access (OWA) with RSA SecurID allows local users to bypass the SecurID authentication for a pr…
    Microsoft Exchange
    EPSS 2.2% chance of exploitation in 30 days, percentile 82%
  30. 5.0
    CVE-2002-0055 SMTP service in Microsoft Windows 2000, Windows XP Professional, and Exchange 2000 allows remote attackers to cause a denial of service via…
    Microsoft Exchange
    EPSS 38.0% chance of exploitation in 30 days, percentile 98%