Skip to content
Fencer Intel

All · Microsoft Exchange

Newest first, late arrivals on top. Also a feed.

  1. 9.8
    CVE-2019-0586 A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, a…
    Microsoft Exchange
    EPSS 15.4% chance of exploitation in 30 days, percentile 96%
  2. 4.3
    CVE-2018-8604 A tampering vulnerability exists when Microsoft Exchange Server fails to properly handle profile data, aka "Microsoft Exchange Server Tampe…
    Microsoft Exchange
    EPSS 2.4% chance of exploitation in 30 days, percentile 84%
  3. 7.4
    CVE-2018-8581 An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka "Microsoft Exchange Server Elevation of Privilege Vulnerab…
    Microsoft Exchange
    kev+ ransomware EPSS 27.6% chance of exploitation in 30 days, percentile 98%
  4. 5.4
    CVE-2018-8448 An elevation of privilege vulnerability exists when Microsoft Exchange Outlook Web Access (OWA) fails to properly handle web requests, aka…
    Microsoft Exchange
    EPSS 3.2% chance of exploitation in 30 days, percentile 88%
  5. 7.8
    CVE-2018-8265 A remote code execution vulnerability exists in the way Microsoft Exchange software parses specially crafted email messages, aka "Microsoft…
    Microsoft Exchange
    EPSS 19.3% chance of exploitation in 30 days, percentile 97%
  6. 8.6
    CVE-2018-16793 Rollup 18 for Microsoft Exchange Server 2010 SP3 and previous versions has an SSRF vulnerability via the username parameter in /owa/auth/lo…
    Microsoft Exchange
    EPSS 11.3% chance of exploitation in 30 days, percentile 96%
  7. 4.3
    CVE-2018-8374 A tampering vulnerability exists when Microsoft Exchange Server fails to properly handle profile data, aka "Microsoft Exchange Server Tampe…
    Microsoft Exchange
    EPSS 3.3% chance of exploitation in 30 days, percentile 88%
  8. 9.8
    CVE-2018-8302 A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, a…
    Microsoft Exchange
    EPSS 27.1% chance of exploitation in 30 days, percentile 98%
  9. 5.4
    CVE-2018-8159 An elevation of privilege vulnerability exists when Microsoft Exchange Outlook Web Access (OWA) fails to properly handle web requests, aka…
    Microsoft Exchange
    EPSS 3.5% chance of exploitation in 30 days, percentile 89%
  10. 9.8
    CVE-2018-8154 A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, a…
    Microsoft Exchange
    EPSS 23.6% chance of exploitation in 30 days, percentile 97%
  11. 5.4
    CVE-2018-8153 A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access (OWA) fails to properly handle web requests, aka "Micr…
    Microsoft Exchange
    EPSS 3.4% chance of exploitation in 30 days, percentile 89%
  12. 5.4
    CVE-2018-8152 An elevation of privilege vulnerability exists when Microsoft Exchange Outlook Web Access (OWA) fails to properly handle web requests, aka…
    Microsoft Exchange
    EPSS 3.5% chance of exploitation in 30 days, percentile 89%
  13. 4.3
    CVE-2018-8151 An information disclosure vulnerability exists when Microsoft Exchange improperly handles objects in memory, aka "Microsoft Exchange Memory…
    Microsoft Exchange
    EPSS 8.7% chance of exploitation in 30 days, percentile 95%
  14. 8.8
    CVE-2018-0986 A remote code execution vulnerability exists when the Microsoft Malware Protection Engine does not properly scan a specially crafted file,…
    Microsoft Exchange
    1 public exploit EPSS 63.3% chance of exploitation in 30 days, percentile 99.2%
  15. 5.5
    CVE-2018-0941 Microsoft Exchange Server 2016 Cumulative Update 7 and Microsoft Exchange Server 2016 Cumulative Update 8 allow an information disclosure v…
    Microsoft Exchange
    EPSS 12.5% chance of exploitation in 30 days, percentile 96%
  16. 6.5
    CVE-2018-0940 Microsoft Exchange Outlook Web Access (OWA) in Microsoft Exchange Server 2010 Service Pack 3 Update Rollup 20, Microsoft Exchange Server 20…
    Microsoft Exchange
    EPSS 7.3% chance of exploitation in 30 days, percentile 94%
  17. 6.5
    CVE-2018-0924 Microsoft Exchange Server 2010 Service Pack 3 Update Rollup 20, Microsoft Exchange Server 2013 Cumulative Update 18, Microsoft Exchange Ser…
    Microsoft Exchange
    EPSS 8.0% chance of exploitation in 30 days, percentile 94%
  18. 8.1
    CVE-2017-11932 Microsoft Exchange Server 2016 CU5 and Microsoft Exchange Server 2016 CU5 allow a spoofing vulnerability due to the way Outlook Web Access…
    Microsoft Exchange
    EPSS 5.9% chance of exploitation in 30 days, percentile 93%
  19. 6.1
    CVE-2017-8758 Microsoft Exchange Server 2016 allows an elevation of privilege vulnerability when Microsoft Exchange Outlook Web Access (OWA) fails to pro…
    Microsoft Exchange
    EPSS 3.4% chance of exploitation in 30 days, percentile 88%
  20. 5.3
    CVE-2017-11761 Microsoft Exchange Server 2013 and Microsoft Exchange Server 2016 allow an input sanitization issue with Microsoft Exchange that could pote…
    Microsoft Exchange
    EPSS 6.6% chance of exploitation in 30 days, percentile 93%
  21. 6.1
    CVE-2017-8621 Microsoft Exchange Server 2010 SP3, Exchange Server 2013 SP3, Exchange Server 2013 CU16, and Exchange Server 2016 CU5 allows an open redire…
    Microsoft Exchange
    EPSS 3.2% chance of exploitation in 30 days, percentile 88%
  22. 6.1
    CVE-2017-8560 Microsoft Exchange Server 2010 SP3, Exchange Server 2013 SP3, Exchange Server 2013 CU16, and Exchange Server 2016 CU5 allows an elevation o…
    Microsoft Exchange
    EPSS 3.4% chance of exploitation in 30 days, percentile 89%
  23. 6.1
    CVE-2017-8559 Microsoft Exchange Server 2010 SP3, Exchange Server 2013 SP3, Exchange Server 2013 CU16, and Exchange Server 2016 CU5 allows an elevation o…
    Microsoft Exchange
    EPSS 3.4% chance of exploitation in 30 days, percentile 89%
  24. 7.8
    CVE-2017-8540 The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 S…
    Microsoft Exchange
    kev 1 public exploit EPSS 71.9% chance of exploitation in 30 days, percentile 99.4%
  25. 5.5
    CVE-2017-8537 The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 S…
    Microsoft Exchange
    1 public exploit EPSS 16.8% chance of exploitation in 30 days, percentile 97%
  26. 5.5
    CVE-2017-8536 The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 S…
    Microsoft Exchange
    1 public exploit EPSS 16.8% chance of exploitation in 30 days, percentile 97%
  27. 5.5
    CVE-2017-8535 The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 S…
    Microsoft Exchange
    1 public exploit EPSS 16.8% chance of exploitation in 30 days, percentile 97%
  28. 6.1
    CVE-2017-0110 Cross-site scripting (XSS) vulnerability in Microsoft Exchange Outlook Web Access (OWA) allows remote attackers to inject arbitrary web scr…
    Microsoft Exchange
    EPSS 7.9% chance of exploitation in 30 days, percentile 94%
  29. 6.1
    CVE-2016-3379 Cross-site scripting (XSS) vulnerability in Microsoft Exchange Server 2016 Cumulative Update 1 and 2 allows remote attackers to inject arbi…
    Microsoft Exchange
    EPSS 8.2% chance of exploitation in 30 days, percentile 94%
  30. 7.4
    CVE-2016-3378 Open redirect vulnerability in Microsoft Exchange Server 2013 SP1, 2013 Cumulative Update 12, 2013 Cumulative Update 13, 2016 Cumulative Up…
    Microsoft Exchange
    EPSS 15.3% chance of exploitation in 30 days, percentile 96%