3049 matches found
Vulnerabilities fixed in Microsoft Exchange
Microsoft has fixed vulnerabilities in Exchange Server. A authenticated malicious person could exploit the vulnerabilities to execute arbitrary code under permissions from the process of Exchange Server itself. As a rule, Exchange Server runs with restricted privileges. Microsoft Exchange Server:...
PT-2023-1453
Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server affected versions not specified Description The issue is related to the use of dangerous methods or functions in Microsoft Exchange Server, allowing a remote attacker to execute arbitrary code. This can enable the...
Microsoft Urges Customers to Secure On-Premises Exchange Servers
Microsoft is urging customers to keep their Exchange servers updated as well as take steps to bolster the environment, such as enabling Windows Extended Protection and configuring certificate-based signing of PowerShell serialization payloads. "Attackers looking to exploit unpatched Exchange...
Microsoft Urges Customers to Secure On-Premises Exchange Servers
Microsoft is urging customers to keep their Exchange servers updated as well as take steps to bolster the environment, such as enabling Windows Extended Protection and configuring certificate-based signing of PowerShell serialization payloads. "Attackers looking to exploit unpatched Exchange...
The vulnerability of the Microsoft Exchange Server mail server, related to access to a channel from a non-endpoint location, allows attackers to perform spoofing attacks.
The vulnerability of Microsoft Exchange Server lies in the access to the channel from a point that is not a final destination. Exploiting this vulnerability allows a malicious actor to perform a spoofing attack remotely...
The vulnerability of Microsoft Exchange Server servers, related to deficiencies in access control, allows attackers to increase their privileges.
The vulnerability of Microsoft Exchange Server is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of the Microsoft Exchange Server mail server, combined with deficiencies in access control, allows attackers to increase their privileges.
The vulnerability of Microsoft Exchange Server is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of Microsoft Exchange Server servers, related to the lack of protection for service data, allows attackers to disclose protected information.
The vulnerability of Microsoft Exchange Server lies in the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information...
The vulnerability of Microsoft Exchange Server servers, related to access to a channel from a non-endpoint location, allows attackers to perform spoofing attacks.
The vulnerability of Microsoft Exchange Server lies in the access to the channel from a point that is not a final destination. Exploiting this vulnerability allows an attacker to perform spoofing attacks remotely...
Microsoft Exchange Server Spoofing Vulnerability (CNVD-2023-51377)
Microsoft Exchange Server is the United States Microsoft Microsoft company's set of e-mail service program. It provides e-mail access, storage, forwarding, voice mail, e-mail filtering and screening. A spoofing vulnerability exists in Microsoft Exchange Server, which can be exploited by attackers...
Microsoft Exchange Server Spoofing Vulnerability (CNVD-2023-51373)
Microsoft Exchange Server is the United States Microsoft Microsoft company's set of e-mail service program. It provides e-mail access, storage, forwarding, voice mail, e-mail filtering and screening. A spoofing vulnerability exists in Microsoft Exchange Server, which can be exploited by attackers...
Microsoft Exchange Server Elevation of Privilege Vulnerability (CNVD-2023-51375)
Microsoft Exchange Server is the United States Microsoft Microsoft company's set of e-mail service program. It provides e-mail access, storage, forwarding, voice mail, e-mail filtering and screening. An elevation of privilege vulnerability exists in Microsoft Exchange Server, which can be exploit...
Microsoft Exchange Server Information Disclosure Vulnerability
Microsoft Exchange Server is the United States Microsoft Microsoft company's set of e-mail service program. It provides e-mail access, storage, forwarding, voice mail, e-mail filtering and screening. An information disclosure vulnerability exists in Microsoft Exchange Server, which can be exploit...
Microsoft Exchange Server Elevation of Privilege Vulnerability (CNVD-2023-51374)
Microsoft Exchange Server is the United States Microsoft Microsoft company's set of e-mail service program. It provides e-mail access, storage, forwarding, voice mail, e-mail filtering and screening. An elevation of privilege vulnerability exists in Microsoft Exchange Server, which can be exploit...
Update now! Patch Tuesday January 2023 includes one actively exploited vulnerability
The first Microsoft Patch Tuesday of 2023 is an important one to start of the year with. In total 98 vulnerabilities were patched, including 11 that were labelled critical and one that is being actively exploited in the wild. This is also the last time we expect to see fixes for Windows 8.1...
Microsoft Issues January 2023 Patch Tuesday Updates, Warns of Zero-Day Exploit
The first Patch Tuesday fixes shipped by Microsoft for 2023 have addressed a total of 98 security flaws, including one bug that the company said is being actively exploited in the wild. 11 of the 98 issues are rated Critical and 87 are rated Important in severity, with one of the vulnerabilities...
Security Updates for Microsoft Exchange Server (Jan 2023)
The Microsoft Exchange Server installed on the remote host is missing a security update. It is, therefore, affected by multiple vulnerabilities as referenced in the Jan, 2023 security bulletin. - Microsoft Exchange Server Spoofing Vulnerability CVE-2023-21745, CVE-2023-21762 - Microsoft Exchange...
Vulnerabilities fixed in Microsoft Exchange Server
Microsoft has fixed vulnerabilities in Exchange Server. The vulnerabilities allow a malicious party to carry out attacks execute attacks that result in the following categories of damage: Accessing sensitive data. Impersonating another user spoofing Obtaining elevated privileges The vulnerability...
Patch Tuesday - January 2023
Microsoft is starting the new year with a bang! Today’s Patch Tuesday release addresses almost 100 CVEs. After a relatively mild holiday season, defenders and admins now have a wide range of exciting new vulnerabilities to consider. Two zero-day vulnerabilities emerged today, both affecting a wid...
