KLA11335 Multiple vulnerabilities in Microsoft Exchange Server

Multiple serious vulnerabilities were found in Microsoft Exchange. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft Exchange can be exploited remotely vi...

CVE-2018-16793

CVE-2018-16793 : Concrete details across connected sources show a server-side request forgery (SSRF) in Rollup 18 for Microsoft Exchange Server 2010 SP3 and earlier, exploitable via the username parameter in the OWA login page (/owa/auth/logon.aspx). The underlying issue is a SSRF condition that ...

The vulnerability of the Microsoft Exchange Server mail server, related to errors in memory object processing, allows a hacker to execute arbitrary code.

The vulnerability of Microsoft Exchange Server is related to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with SYSTEM privileges remotely...

Microsoft Exchange Server Memory Corruption Vulnerability

Microsoft Exchange Server is a set of e-mail service programs from Microsoft, which provides e-mail access, storage, forwarding, voice mail, e-mail filtering and screening. A memory corruption vulnerability exists in Microsoft Exchange Server that stems from the program failing to properly handle...

CVE-2018-8374

A tampering vulnerability exists when Microsoft Exchange Server fails to properly handle profile data, aka "Microsoft Exchange Server Tampering Vulnerability." This affects Microsoft Exchange Server...

CVE-2018-8374

A tampering vulnerability exists when Microsoft Exchange Server fails to properly handle profile data, aka "Microsoft Exchange Server Tampering Vulnerability." This affects Microsoft Exchange Server...

CVE-2018-8302

A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka "Microsoft Exchange Memory Corruption Vulnerability." This affects Microsoft Exchange Server...

Spoofing

A tampering vulnerability exists when Microsoft Exchange Server fails to properly handle profile data, aka "Microsoft Exchange Server Tampering Vulnerability." This affects Microsoft Exchange Server...

CVE-2018-8374

CVE-2018-8374 is a tampering vulnerability in Microsoft Exchange Server related to how profile data is processed. Public sources in the connected set indicate impact on Microsoft Exchange Server 2016 CU9 and CU10, where an attacker who authenticates could modify a targeted user’s profile data by ...

Description of the security update for Microsoft Exchange Server 2013 and 2016: August 14, 2018

Description of the security update for Microsoft Exchange Server 2013 and 2016: August 14, 2018 Summary This security update resolves vulnerabilities in Microsoft Exchange. To learn more about these vulnerabilities, see the following Common Vulnerabilities and Exposures CVE: Microsoft Common...

Microsoft Exchange Server Voicemail Transcription Improper Access Control Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Exchange. Authentication is required to exploit this vulnerability. The specific flaw exists within the conversion of voicemails to text. Due to improper access control, an attacker who h...

KLA11302 Multiple vulnerabilities in Microsoft Exchange Server

Multiple serious vulnerabilities were found in Microsoft Exchange Server. Malicious users can exploit these vulnerabilities to execute arbitrary code and bypass security restrictions. Below is a complete list of vulnerabilities: 1. An tampering vulnerability can be exploited via specially crafted...

The vulnerability of the Microsoft Exchange Server mail server arises from a transaction that occurs outside the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Exchange Server arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code with SYSTEM-level privileges by sending a specially crafted email to the...

June 2018 Oracle Outside In Library Security Update

Microsoft Exchange Server contains some elements of the Oracle Outside In libraries. The June 19, 2018 releases of Microsoft Exchange Server contain fixes to the following vulnerabilities, which are described in: Oracle Critical Patch Update Advisory - April 2018: CVE-2018-2768, CVE-2018-2806,...

KLA11269 Multiple vulnerabilities in Microsoft Exchange Server

Multiple serious vulnerabilities have been found in Microsoft Exchange Server. Malicious users can exploit these vulnerabilities to cause denial of service or obtain sensitive data. These vulnerabilities are related to Oracle Outside In libraries elements and can be exploited by unauthenticated...

Security Bulletin: Vulnerability in InstallShield affects IBM Tivoli Storage Manager for Mail: Data Protection for Microsoft Exchange Server (CVE-2016-2542)

Summary InstallShield generates installation executables which are vulnerable to a DLL-planting that affects IBM Tivoli Storage Manager for Mail: Data Protection for Microsoft Exchange Server IBM Spectrum Protect for Mail on Windows platforms. Vulnerability Details CVEID: CVE-2016-2542 DESCRIPTIO...

CVE-2018-8159

An elevation of privilege vulnerability exists when Microsoft Exchange Outlook Web Access OWA fails to properly handle web requests, aka "Microsoft Exchange Elevation of Privilege Vulnerability." This affects Microsoft Exchange Server...

CVE-2018-8152

An elevation of privilege vulnerability exists when Microsoft Exchange Outlook Web Access OWA fails to properly handle web requests, aka "Microsoft Exchange Server Elevation of Privilege Vulnerability." This affects Microsoft Exchange Server...

CVE-2018-8153

A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access OWA fails to properly handle web requests, aka "Microsoft Exchange Spoofing Vulnerability." This affects Microsoft Exchange Server...

CVE-2018-8154

A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka "Microsoft Exchange Memory Corruption Vulnerability." This affects Microsoft Exchange Server. This CVE ID is unique from CVE-2018-8151...