3051 matches found
Privilege escalation
An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of Privilege Vulnerability'...
CVE-2020-0692
Technical details about CVE-2020-0692 are not publicly available in the provided documents. The entries mention an Elevation of Privilege in Microsoft Exchange Server but do not specify affected components, versions, or remediation. Monitor for updates.
CVE-2020-0692
An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of Privilege Vulnerability'...
Microsoft Exchange Server Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in Microsoft Exchange Server. An attacker who successfully exploited this vulnerability could gain the same rights as any other user of the Exchange server. This could allow the attacker to perform activities such as accessing the mailboxes of other...
Description of the security update for Microsoft Exchange Server 2013: February 11, 2020
Description of the security update for Microsoft Exchange Server 2013: February 11, 2020 This update rollup is a security update that resolves vulnerabilities in Microsoft Exchange. To learn more about these vulnerabilities, see the following Common Vulnerabilities and Exposures CVE: CVE-2020-069...
Description of the security update for Microsoft Exchange Server 2019 and 2016: February 11, 2020
None None...
PT-2020-1715
Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server affected versions not specified Description A remote code execution issue exists in Microsoft Exchange Server due to the failure to properly create unique keys during installation. This flaw, also referred to as a...
KLA11664 Multiple vulnerabilities in Microsoft Exchange Server
Multiple vulnerabilities were found in Microsoft Exchange Server. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Microsoft Exchange Server can be exploited...
Exchange Control Panel ViewState Deserialization
This module exploits a .NET serialization vulnerability in the Exchange Control Panel ECP web page. The vulnerability is due to Microsoft Exchange Server not randomizing the keys on a per-installation basis resulting in them using the same validationKey and decryptionKey values. With knowledge of...
Security update for MozillaThunderbird (important)
openSUSE Security Update: Security update for MozillaThunderbird Announcement ID: openSUSE-SU-2020:0094-1 Rating: important References: 1160305 1160498 Cross-References: CVE-2019-17015 CVE-2019-17016 CVE-2019-17017 CVE-2019-17021 CVE-2019-17022 CVE-2019-17024 CVE-2019-17026 Affected Products:...
Microsoft Exchange Server DNS Vulnerability
Microsoft Exchange Server is a suite of e-mail service programs. Microsoft Exchange Server has a security vulnerability. A remote attacker could force a vulnerable server to send requests to any remote server...
Microsoft Exchange Server External Service Interaction
I. VULNERABILITY ------------------------- Microsoft Exchange Server, External Service Interaction DNS Exchange Server 2013 CU22 and previous. II. CVE REFERENCE ------------------------- Not Assigned Yet III. VENDOR ------------------------- https://www.microsoft.com IV. DESCRIPTION...
Microsoft Exchange Server '/Autodiscover' Server Side Request Forgery Security Bypass Vulnerability
Description Microsoft Exchange Server is prone to a security-bypass vulnerability. Attackers can exploit this issue to bypass certain security restrictions to perform unauthorized actions. This may aid in further attacks. Microsoft Exchange Server 2013 Cumulative Update 22 and prior versions are...
The vulnerability of Microsoft Exchange Server’s mail server, related to deficiencies in the deserialization mechanism, allows attackers to execute arbitrary code.
The vulnerability of Microsoft Exchange Server is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Security Updates for Exchange (November 2019)
The Microsoft Exchange Server installed on the remote host is missing a security update. It is, therefore, affected by the following vulnerability : - A remote code execution vulnerability exists in Microsoft Exchange through the deserialization of metadata via PowerShell. An attacker who...
CVE-2019-3641
Abuse of Authorization vulnerability in APIs exposed by TIE server in McAfee Threat Intelligence Exchange Server TIE Server 3.0.0 allows remote authenticated users to modify stored reputation data via specially crafted messages...
CVE-2019-3641
CVE-2019-3641 affects McAfee Threat Intelligence Exchange Server (TIE Server) 3.0.0, where an Abuse of Authorization in the exposed APIs allows remote authenticated users to modify stored reputation data via specially crafted messages. The root cause is an authorization/control weakness in TIE Se...
CVE-2019-3641 Exploitation of Authorization in TIE Server
Abuse of Authorization vulnerability in APIs exposed by TIE server in McAfee Threat Intelligence Exchange Server TIE Server 3.0.0 allows remote authenticated users to modify stored reputation data via specially crafted messages...
KLA11606 ACE vulnerability in Microsoft Exchange Server
Unspecified vulnerability was found in Exchange Server. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2019-1373 Related products Microsoft-Exchange-Server CVE list CVE-2019-1373 critical KB list 4523171 Solution Install necessary updates from th...
McAfee Threat Intelligence Exchange Server CVE-2019-3641 Unauthorized Access Vulnerability
Description McAfee Threat Intelligence Exchange Server is prone to an unauthorized-access vulnerability. Attackers can exploit this issue to gain unauthorized access and perform unauthorized actions. This may aid in further attacks. McAfee Threat Intelligence Exchange Server 3.0.0 is vulnerable...