KLA60568 Multiple vulnerabilities in Microsoft Server Software

🗓️ 12 Sep 2023 00:00:00Reported by Kaspersky LabType

kaspersky🔗 threats.kaspersky.com👁 43 Views

Multiple Microsoft Exchange Server vulnerabilities, high severity, allow information theft, code execution, and UI spoofing. Public exploits exist

Reporter	Title	Published	Views	Family All 80
GithubExploit	Exploit for Deserialization of Untrusted Data in Microsoft	23 Oct 202319:06	–	githubexploit
Information Security Automation	September 2023: VM courses, Bahasa Indonesia, Russian Podcasts, Goodbye Tinkoff, MS Patch Tuesday, Qualys TOP 20, Linux, Forrester, GigaOm, R-Vision VM	30 Sep 202319:31	–	avleonov
BDU FSTEC	The vulnerability of the Microsoft Exchange Server email server is related to access control errors, which allow a hacker to execute arbitrary code within the context of the server’s user account.	13 Sep 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Exchange Server’s mail server, related to deficiencies in authentication procedures, allows attackers to carry out spear-phishing attacks.	14 Sep 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Exchange Server’s mail server, related to deficiencies in the deserialization mechanism, allows attackers to execute arbitrary code.	14 Sep 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Exchange Server’s mail server, related to access control errors, allows a hacker to execute arbitrary code.	14 Sep 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the ProjectInstance class in the Microsoft Exchange Server mail server allows a perpetrator to gain unauthorized access to protected information.	16 Sep 202300:00	–	bdu_fstec
Circl	CVE-2023-36744	12 Sep 202320:29	–	circl
Circl	CVE-2023-36745	12 Sep 202320:23	–	circl
Circl	CVE-2023-36756	5 Sep 202415:39	–	circl

Source	Link
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36777
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36744
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36757
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36756
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36745
threats	www.threats.kaspersky.com/en/class/Exploit/
threats	www.threats.kaspersky.com/en/product/Microsoft-Exchange-Server/
support	www.support.microsoft.com/kb/5030524
statistics	www.statistics.securelist.com/

28 Mar 2025 00:00Current

8.2High risk

Vulners AI Score8.2

CVSS 3.18

EPSS0.81713

SSVC