Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: vendors Tag: exchange-server Clear
ID Title
CVE-2026-65813 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-65813)
SSRF in ssrf (CVE-2026-65813). Confidential information can be exposed externally.
CVE-2026-62915 Vulnerability in microsoft (CVE-2026-62915)
vulnerability in microsoft (CVE-2026-62915). Data can be tampered with by attackers.
CVE-2026-62914 Cross-Site Scripting (XSS) in microsoft (CVE-2026-62914)
cross-site scripting in microsoft (CVE-2026-62914). Confidential information can be exposed externally.
CVE-2026-62913 Vulnerability in microsoft (CVE-2026-62913)
vulnerability in microsoft (CVE-2026-62913). Successful exploitation can lead to full system takeover.
CVE-2026-62912 Unsafe Deserialization in deserialization (CVE-2026-62912)
vulnerability in deserialization (CVE-2026-62912). Risk of unauthorized operations or information disclosure.
CVE-2026-62911 Vulnerability in microsoft (CVE-2026-62911)
vulnerability in microsoft (CVE-2026-62911). Successful exploitation can lead to full system takeover.
CVE-2026-62910 Vulnerability in microsoft (CVE-2026-62910)
vulnerability in microsoft (CVE-2026-62910). Successful exploitation can lead to full system takeover.
CVE-2026-55005 Vulnerability in microsoft (CVE-2026-55005)
vulnerability in microsoft (CVE-2026-55005). Successful exploitation can lead to full system takeover.
CVE-2026-55009 Unsafe Deserialization in deserialization (CVE-2026-55009)
vulnerability in deserialization (CVE-2026-55009). Successful exploitation can lead to full system takeover.
CVE-2026-55008 Cross-Site Scripting (XSS) in microsoft (CVE-2026-55008)
cross-site scripting in microsoft (CVE-2026-55008). Successful exploitation can lead to full system takeover.
CVE-2026-55006 Vulnerability in microsoft (CVE-2026-55006)
vulnerability in microsoft (CVE-2026-55006). Successful exploitation can lead to full system takeover.
CVE-2026-45504 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-45504)
SSRF in ssrf (CVE-2026-45504). Successful exploitation can lead to full system takeover.
CVE-2026-45583 Code Injection in microsoft (CVE-2026-45583)
code injection in microsoft (CVE-2026-45583). Successful exploitation can lead to full system takeover.
CVE-2026-45501 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-45501)
SSRF in ssrf (CVE-2026-45501). Confidential information can be exposed externally.
CVE-2026-45502 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-45502)
SSRF in ssrf (CVE-2026-45502). Risk of unauthorized operations or information disclosure.
CVE-2026-45500 Cross-Site Scripting (XSS) in microsoft (CVE-2026-45500)
cross-site scripting in microsoft (CVE-2026-45500). Risk of unauthorized operations or information disclosure.
CVE-2026-47631 Cross-Site Scripting (XSS) in microsoft (CVE-2026-47631)
cross-site scripting in microsoft (CVE-2026-47631). Confidential information can be exposed externally.
CVE-2026-45503 Vulnerability in ssrf (CVE-2026-45503)
vulnerability in ssrf (CVE-2026-45503). Confidential information can be exposed externally.
CVE-2026-42897 KEV [KEV] Cross-Site Scripting (XSS) in Microsoft exchange-server (CVE-2026-42897)
cross-site scripting in Microsoft exchange-server (CVE-2026-42897). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited.
CVE-2023-21529 KEV [KEV] Unsafe Deserialization in Microsoft exchange-server (CVE-2023-21529)
vulnerability in Microsoft exchange-server (CVE-2023-21529). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2026-21527 Vulnerability in microsoft (CVE-2026-21527)
vulnerability in microsoft (CVE-2026-21527). Risk of unauthorized operations or information disclosure.
CVE-2025-64667 Vulnerability in microsoft (CVE-2025-64667)
vulnerability in microsoft (CVE-2025-64667). Risk of unauthorized operations or information disclosure.
CVE-2025-64666 Vulnerability in microsoft (CVE-2025-64666)
vulnerability in microsoft (CVE-2025-64666). Successful exploitation can lead to full system takeover.
CVE-2025-59249 Vulnerability in microsoft (CVE-2025-59249)
vulnerability in microsoft (CVE-2025-59249). Successful exploitation can lead to full system takeover.
CVE-2025-59248 Vulnerability in microsoft (CVE-2025-59248)
vulnerability in microsoft (CVE-2025-59248). Confidential information can be exposed externally.
CVE-2025-53782 Vulnerability in microsoft (CVE-2025-53782)
vulnerability in microsoft (CVE-2025-53782). Successful exploitation can lead to full system takeover.
CVE-2025-33051 Information Disclosure in microsoft (CVE-2025-33051)
vulnerability in microsoft (CVE-2025-33051). Confidential information can be exposed externally.
CVE-2025-25007 Vulnerability in microsoft (CVE-2025-25007)
vulnerability in microsoft (CVE-2025-25007). Risk of unauthorized operations or information disclosure.
CVE-2025-25006 Vulnerability in microsoft (CVE-2025-25006)
vulnerability in microsoft (CVE-2025-25006). Risk of unauthorized operations or information disclosure.
CVE-2025-25005 Vulnerability in microsoft (CVE-2025-25005)
vulnerability in microsoft (CVE-2025-25005). Confidential information can be exposed externally.
CVE-2025-53786 Authentication Bypass in microsoft (CVE-2025-53786)
authentication bypass in microsoft (CVE-2025-53786). Successful exploitation can lead to full system takeover.
CVE-2021-31196 KEV [KEV] Vulnerability in Microsoft exchange-server (CVE-2021-31196)
vulnerability in Microsoft exchange-server (CVE-2021-31196). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2024-21410 KEV [KEV] Authentication Bypass in Microsoft exchange-server (CVE-2024-21410)
authentication bypass in Microsoft exchange-server (CVE-2024-21410). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2023-38185 Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2023-38181 Microsoft Exchange Server Spoofing Vulnerability
Microsoft Exchange Server Spoofing Vulnerability
CVE-2023-38182 Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2023-35388 Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2023-35368 Microsoft Exchange Remote Code Execution Vulnerability
Microsoft Exchange Remote Code Execution Vulnerability
CVE-2023-21709 Microsoft Exchange Server Elevation of Privilege Vulnerability
Microsoft Exchange Server Elevation of Privilege Vulnerability
CVE-2023-21707 Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2023-21706 Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2022-41080 KEV [KEV] Vulnerability in Microsoft exchange-server (CVE-2022-41080)
vulnerability in Microsoft exchange-server (CVE-2022-41080). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2022-41123 Microsoft Exchange Server Elevation of Privilege Vulnerability
Microsoft Exchange Server Elevation of Privilege Vulnerability
CVE-2022-41079 Microsoft Exchange Server Spoofing Vulnerability
Microsoft Exchange Server Spoofing Vulnerability
CVE-2022-41078 Microsoft Exchange Server Spoofing Vulnerability
Microsoft Exchange Server Spoofing Vulnerability
CVE-2022-41082 KEV [KEV] Unsafe Deserialization in Microsoft exchange-server (CVE-2022-41082)
vulnerability in Microsoft exchange-server (CVE-2022-41082). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2022-41040 KEV [KEV] SSRF (Server-Side Request Forgery) in Microsoft exchange-server (CVE-2022-41040)
SSRF in Microsoft exchange-server (CVE-2022-41040). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2018-8581 KEV [KEV] Vulnerability in Microsoft exchange-server (CVE-2018-8581)
vulnerability in Microsoft exchange-server (CVE-2018-8581). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2021-33766 KEV [KEV] Authentication Bypass in Microsoft exchange-server (CVE-2021-33766)
authentication bypass in Microsoft exchange-server (CVE-2021-33766). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2021-42321 KEV [KEV] Vulnerability in Microsoft exchange (CVE-2021-42321)
vulnerability in Microsoft exchange (CVE-2021-42321). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →