CVE-2023-21762

CVE-2023-21762 is a Microsoft Exchange Server Spoofing vulnerability. Connected advisories/documentation confirm it affects Exchange Server deployments and was addressed by Microsoft in Jan 2023 updates. Specifically, KB5022188 covers Exchange Server 2013 CU23 SU19 and lists CVE-2023-21762 among ...

CVE-2023-21745

CVE-2023-21745 is a Microsoft Exchange Server spoofing vulnerability affecting multiple Exchange versions. The connected documents confirm it as a spoofing flaw in Exchange Server that was addressed via January 2023 security updates (KB5022143 for Exchange 2016 and KB5022193 for Exchange 2019). T...

PT-2023-1096 · Microsoft · Exchange Server

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server affected versions not specified Description: The issue is related to insufficient access control in Microsoft Exchange Server, allowing an attacker to elevate their privileges. This can impact the system, potentially...

CVE-2023-21761 Microsoft Exchange Server Information Disclosure Vulnerability

...

PT-2023-1097 · Microsoft · Exchange Server

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server affected versions not specified Description: The issue is related to a lack of protection for service data in Microsoft Exchange Server, which can be exploited to disclose protected information. This can allow an...

Microsoft Exchange Server Privilege Escalation Vulnerability

Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation. This vulnerability is chainable with CVE-2022-41082, which allows for remote code execution...

Rackspace Confirms Play Ransomware Gang Responsible for Recent Breach

Cloud services provider Rackspace on Thursday confirmed that the ransomware gang known as Play was responsible for last month's breach. The security incident, which took place on December 2, 2022, leveraged a previously unknown security exploit to gain initial access to the Rackspace Hosted...

Exploit for CVE-2022-41080

CVE-2022-41080 Desc - CrowdStrike recently discovered a n...

Exploit for Deserialization of Untrusted Data in Microsoft

CVE-2022-41082-POC PoC for the CVE-2022-41082 NotProxyShell OW...

Ransomware Hackers Using New Way to Bypass MS Exchange ProxyNotShell Mitigations

Threat actors affiliated with a ransomware strain known as Play are leveraging a never-before-seen exploit chain that bypasses blocking rules for ProxyNotShell flaws in Microsoft Exchange Server to achieve remote code execution RCE through Outlook Web Access OWA. "The new exploit method bypasses...

VulnCheck KEV: CVE-2022-41080

Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation. This vulnerability is chainable with CVE-2022-41082, which allows for remote code execution...

BackdoorDiplomacy targets the telecom industry in the Middle East

Threat Level Actor Report For a detailed threat advisory, download the pdf file here Summary BackdoorDiplomacy, an advanced persistent threat APT gang with roots in China, is most likely behind a hostile campaign targeting the Middle East. The espionage action, aimed at a Middle Eastern telecom...

The vulnerability of Microsoft Exchange Server servers, related to errors in information representation by the user interface, allows attackers to perform spoofing attacks.

The vulnerability of Microsoft Exchange Server is related to errors in information representation by the user interface. Exploiting this vulnerability can allow a malicious actor to perform a spoofing attack remotely...

The vulnerability of Microsoft Exchange Server servers, related to deficiencies in access control, allows attackers to increase their privileges.

The vulnerability of Microsoft Exchange Server servers is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

The vulnerability of Microsoft Exchange Server servers, related to deficiencies in access control, allows attackers to increase their privileges.

The vulnerability of Microsoft Exchange Server is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of Microsoft Exchange Server servers arises from the improper processing of user data, allowing attackers to carry out spamming attacks.

The vulnerability of Microsoft Exchange Server exists due to incorrect processing of user data. Exploiting this vulnerability allows a malicious actor to perform a spear-phishing attack remotely...

Security Updates for Microsoft Exchange Server (Nov 2022)

The Microsoft Exchange Server installed on the remote host is missing a security update. It is, therefore, affected by multiple vulnerabilities as referenced in the Nov, 2022 security bulletin. - Microsoft Exchange Server Spoofing Vulnerability CVE-2022-41078, CVE-2022-41079 - Microsoft Exchange...

Microsoft Exchange Server Elevation of Privilege Vulnerability (CNVD-2022-89608)

Microsoft Exchange Server is a set of email service programs from Microsoft Corporation USA. It provides mail access, storage, forwarding, voice mail, mail filtering and other functions. An attacker could exploit this vulnerability to elevate privileges...

Microsoft Exchange Server Spoofing Vulnerability (CNVD-2023-72231)

Microsoft Exchange Server is the United States Microsoft Microsoft company's set of e-mail service program. It provides e-mail access, storage, forwarding, voice mail, e-mail filtering and screening. A spoofing vulnerability exists in Microsoft Exchange Server, which can be exploited by attackers...

Microsoft Exchange Server Spoofing Vulnerability (CNVD-2023-72230)

Microsoft Exchange Server is the United States Microsoft Microsoft company's set of e-mail service program. It provides e-mail access, storage, forwarding, voice mail, e-mail filtering and screening. A spoofing vulnerability exists in Microsoft Exchange Server, which can be exploited by attackers...