Vulnerabilities fixed in Microsoft Exchange

🗓️ 12 Sep 2023 00:00:00Reported by NCSCType

ncsc

ncsc🔗 advisories.ncsc.nl👁 2 Views

Microsoft fixed Exchange vulnerabilities enabling impersonation and code execution.

Reporter	Title	Published	Views	Family All 80
GithubExploit	Exploit for Deserialization of Untrusted Data in Microsoft	23 Oct 202319:06	–	githubexploit
Information Security Automation	September 2023: VM courses, Bahasa Indonesia, Russian Podcasts, Goodbye Tinkoff, MS Patch Tuesday, Qualys TOP 20, Linux, Forrester, GigaOm, R-Vision VM	30 Sep 202319:31	–	avleonov
BDU FSTEC	The vulnerability of the Microsoft Exchange Server email server is related to access control errors, which allow a hacker to execute arbitrary code within the context of the server’s user account.	13 Sep 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Exchange Server’s mail server, related to deficiencies in authentication procedures, allows attackers to carry out spear-phishing attacks.	14 Sep 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Exchange Server’s mail server, related to deficiencies in the deserialization mechanism, allows attackers to execute arbitrary code.	14 Sep 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Exchange Server’s mail server, related to access control errors, allows a hacker to execute arbitrary code.	14 Sep 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the ProjectInstance class in the Microsoft Exchange Server mail server allows a perpetrator to gain unauthorized access to protected information.	16 Sep 202300:00	–	bdu_fstec
Circl	CVE-2023-36744	12 Sep 202320:29	–	circl
Circl	CVE-2023-36745	12 Sep 202320:23	–	circl
Circl	CVE-2023-36756	5 Sep 202415:39	–	circl

12 Sep 2023 00:00Current

7.3High risk

Vulners AI Score7.3

CVSS 3.18

EPSS0.73589

SSVC

exchange vulnerabilities impersonation risk code execution updates available local network authentication workarounds