Skip to content
Fencer Intel

All · Microsoft Exchange

Newest first, late arrivals on top. Also a feed.

  1. 4.3
    CVE-2016-0138 Microsoft Exchange Server 2007 SP3, 2010 SP3, 2013 SP1, 2013 Cumulative Update 12, 2013 Cumulative Update 13, 2016 Cumulative Update 1, and…
    Microsoft Exchange
    EPSS 13.5% chance of exploitation in 30 days, percentile 96%
  2. 6.1
    CVE-2016-0032 Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) in Microsoft Exchange Server 2013 PS1, 2013 Cumulative Update 10, 2013…
    Microsoft Exchange
    EPSS 7.6% chance of exploitation in 30 days, percentile 94%
  3. 6.1
    CVE-2016-0031 Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) in Microsoft Exchange Server 2016 allows remote attackers to inject ar…
    Microsoft Exchange
    EPSS 7.6% chance of exploitation in 30 days, percentile 94%
  4. 6.1
    CVE-2016-0030 Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) in Microsoft Exchange Server 2013 PS1, 2013 Cumulative Update 10, and…
    Microsoft Exchange
    EPSS 7.6% chance of exploitation in 30 days, percentile 94%
  5. 6.1
    CVE-2016-0029 Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) in Microsoft Exchange Server 2016 allows remote attackers to inject ar…
    Microsoft Exchange
    EPSS 7.6% chance of exploitation in 30 days, percentile 94%
  6. 4.3
    CVE-2015-2544 Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) in Microsoft Exchange Server 2013 Cumulative Update 8 and 9 and SP1 al…
    Microsoft Exchange
    EPSS 9.5% chance of exploitation in 30 days, percentile 95%
  7. 4.3
    CVE-2015-2543 Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) in Microsoft Exchange Server 2013 Cumulative Update 8 and 9 allows rem…
    Microsoft Exchange
    EPSS 9.5% chance of exploitation in 30 days, percentile 95%
  8. 5.0
    CVE-2015-2505 Outlook Web Access (OWA) in Microsoft Exchange Server 2013 Cumulative Update 8 and 9 and SP1 allows remote attackers to obtain sensitive st…
    Microsoft Exchange
    EPSS 18.2% chance of exploitation in 30 days, percentile 97%
  9. 4.3
    CVE-2015-2359 Cross-site scripting (XSS) vulnerability in the web applications in Microsoft Exchange Server 2013 Cumulative Update 8 allows remote attack…
    Microsoft Exchange
    EPSS 11.1% chance of exploitation in 30 days, percentile 95%
  10. 6.8
    CVE-2015-1771 Cross-site request forgery (CSRF) vulnerability in the web applications in Microsoft Exchange Server 2013 SP1 and Cumulative Update 8 allow…
    Microsoft Exchange
    EPSS 5.8% chance of exploitation in 30 days, percentile 93%
  11. 4.3
    CVE-2015-1764 The web applications in Microsoft Exchange Server 2013 SP1 and Cumulative Update 8 allow remote attackers to bypass the Same Origin Policy…
    Microsoft Exchange
    EPSS 13.5% chance of exploitation in 30 days, percentile 96%
  12. 4.3
    CVE-2015-1632 Cross-site scripting (XSS) vulnerability in errorfe.aspx in Outlook Web App (OWA) in Microsoft Exchange Server 2013 SP1 and Cumulative Upda…
    Microsoft Exchange
    EPSS 11.8% chance of exploitation in 30 days, percentile 96%
  13. 5.0
    CVE-2015-1631 Microsoft Exchange Server 2013 SP1 and Cumulative Update 7 allows remote attackers to spoof meeting organizers via unspecified vectors, aka…
    Microsoft Exchange
    EPSS 9.1% chance of exploitation in 30 days, percentile 95%
  14. 4.3
    CVE-2015-1630 Cross-site scripting (XSS) vulnerability in Outlook Web App (OWA) in Microsoft Exchange Server 2013 SP1 and Cumulative Update 7 allows remo…
    Microsoft Exchange
    EPSS 8.9% chance of exploitation in 30 days, percentile 95%
  15. 4.3
    CVE-2015-1629 Cross-site scripting (XSS) vulnerability in Outlook Web App (OWA) in Microsoft Exchange Server 2013 SP1 and Cumulative Update 7 allows remo…
    Microsoft Exchange
    EPSS 8.9% chance of exploitation in 30 days, percentile 95%
  16. 4.3
    CVE-2015-1628 Cross-site scripting (XSS) vulnerability in Outlook Web App (OWA) in Microsoft Exchange Server 2013 SP1 and Cumulative Update 7 allows remo…
    Microsoft Exchange
    EPSS 8.9% chance of exploitation in 30 days, percentile 95%
  17. 3.5
    CVE-2014-6336 Outlook Web App (OWA) in Microsoft Exchange Server 2013 SP1 and Cumulative Update 6 does not properly validate redirection tokens, which al…
    Microsoft Exchange
    EPSS 7.1% chance of exploitation in 30 days, percentile 94%
  18. 4.3
    CVE-2014-6326 Cross-site scripting (XSS) vulnerability in Microsoft Exchange Server 2013 SP1 and Cumulative Update 6 allows remote attackers to inject ar…
    Microsoft Exchange
    EPSS 8.7% chance of exploitation in 30 days, percentile 95%
  19. 4.3
    CVE-2014-6325 Cross-site scripting (XSS) vulnerability in Microsoft Exchange Server 2013 SP1 and Cumulative Update 6 allows remote attackers to inject ar…
    Microsoft Exchange
    EPSS 8.7% chance of exploitation in 30 days, percentile 95%
  20. 5.0
    CVE-2014-6319 Outlook Web App (OWA) in Microsoft Exchange Server 2007 SP3, 2010 SP3, and 2013 SP1 and Cumulative Update 6 does not properly validate toke…
    Microsoft Exchange
    EPSS 9.7% chance of exploitation in 30 days, percentile 95%
  21. 4.3
    CVE-2013-5072 Cross-site scripting (XSS) vulnerability in Outlook Web Access in Microsoft Exchange Server 2010 SP2 and SP3 and 2013 Cumulative Update 2 a…
    Microsoft Exchange
    EPSS 8.9% chance of exploitation in 30 days, percentile 95%
  22. 6.8
    CVE-2013-0418 Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.7 and 8.4 allows context-dependent…
    Microsoft Exchange
    EPSS 8.3% chance of exploitation in 30 days, percentile 95%
  23. 3.5
    CVE-2012-4791 Microsoft Exchange Server 2007 SP3 and 2010 SP1 and SP2 allows remote authenticated users to cause a denial of service (Information Store s…
    Microsoft Exchange
    EPSS 13.4% chance of exploitation in 30 days, percentile 96%
  24. 4.0
    CVE-2010-3937 Microsoft Exchange Server 2007 SP2 on the x64 platform allows remote authenticated users to cause a denial of service (infinite loop and MS…
    Microsoft Exchange
    EPSS 18.4% chance of exploitation in 30 days, percentile 97%
  25. 4.3
    CVE-2010-2091 Microsoft Outlook Web Access (OWA) 8.2.254.0, when Internet Explorer 7 on Windows Server 2003 is used, does not properly handle the id para…
    Microsoft Exchange
    1 public exploit EPSS 17.9% chance of exploitation in 30 days, percentile 97%
  26. 6.4
    CVE-2010-1690 The DNS implementation in smtpsvc.dll before 6.0.2600.5949 in Microsoft Windows 2000 SP4 and earlier, Windows XP SP3 and earlier, Windows S…
    Microsoft Exchange
    EPSS 6.6% chance of exploitation in 30 days, percentile 93%
  27. 6.4
    CVE-2010-1689 The DNS implementation in smtpsvc.dll before 6.0.2600.5949 in Microsoft Windows 2000 SP4 and earlier, Windows XP SP3 and earlier, Windows S…
    Microsoft Exchange
    EPSS 6.6% chance of exploitation in 30 days, percentile 93%
  28. 5.0
    CVE-2010-0025 The SMTP component in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Server 2008 Gold, SP2, and R2, and Exchange Server 2…
    Microsoft Exchange
    EPSS 21.5% chance of exploitation in 30 days, percentile 97%
  29. 5.0
    CVE-2010-0024 The SMTP component in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Server 2008 Gold, SP2, and R2, and Exchange Server 2…
    Microsoft Exchange
    EPSS 10.7% chance of exploitation in 30 days, percentile 95%
  30. 5.0
    CVE-2009-0099 The Electronic Messaging System Microsoft Data Base (EMSMDB32) provider in Microsoft Exchange 2000 Server SP3 and Exchange Server 2003 SP2,…
    Microsoft Exchange
    EPSS 26.2% chance of exploitation in 30 days, percentile 98%