High WID-SEC-2023-0058 5 CVEs

Microsoft Exchange Server: Mehrere Schwachstellen

Published Jan 10, 2023 · Updated Feb 16, 2023 · Revision 2 · de-DE

Vendor: Microsoft Product: Exchange Server 2013 Cumulative Update 23 Product: Exchange Server 2016 Cumulative Update 23 Product: Exchange Server 2019 Product: Exchange Server 2019 Cumulative Update 11 Product: Exchange Server 2019 Cumulative Update 12 Platform: Windows

Summary

Ein Angreifer aus dem angrenzenden Netzwerk oder ein entfernter, anonymer oder lokaler Angreifer kann mehrere Schwachstellen in Microsoft Exchange Server ausnutzen, um seine Privilegien zu erhöhen, Informationen offenzulegen und Daten zu manipulieren.

Product

Microsoft Exchange Server ist das Serverprodukt für das Client-Server Groupware- und Nachrichtensystem der Firma Microsoft.

Vulnerabilities 5

High 8.0

CVE-2023-21745

Microsoft Exchange Server Spoofing Vulnerability

Microsoft Exchange Server Spoofing Vulnerability

Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 Microsoft Exchange Server 2019 Cumulative Update 12 Microsoft Exchange Server 2019 Cumulative Update 11

Jan 10, 2023
High 8.0

CVE-2023-21762

Microsoft Exchange Server Spoofing Vulnerability

Microsoft Exchange Server Spoofing Vulnerability

Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2019 Cumulative Update 12

Jan 10, 2023
High 7.8

CVE-2023-21763

Microsoft Exchange Server Elevation of Privilege Vulnerability

Microsoft Exchange Server Elevation of Privilege Vulnerability

Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 Microsoft Exchange Server 2019 Cumulative Update 12 Microsoft Exchange Server 2019 Cumulative Update 11

Jan 10, 2023
High 7.8

CVE-2023-21764

Microsoft Exchange Server Elevation of Privilege Vulnerability

Microsoft Exchange Server Elevation of Privilege Vulnerability

Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 Microsoft Exchange Server 2019 Cumulative Update 12 Microsoft Exchange Server 2019 Cumulative Update 11

Jan 10, 2023
High 7.5

CVE-2023-21761

Microsoft Exchange Server Information Disclosure Vulnerability

Microsoft Exchange Server Information Disclosure Vulnerability

Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 Microsoft Exchange Server 2019 Cumulative Update 12 Microsoft Exchange Server 2019 Cumulative Update 11

Jan 10, 2023

Revision history

2023-02-16 #2
Korrektur
2023-01-10 #1
Initiale Fassung

References

Microsoft Leitfaden für Sicherheitsupdates vom 2023-01-10
https://msrc.microsoft.com/update-guide