High WID-SEC-2023-1990 6 CVEs

Microsoft Exchange Server: Mehrere Schwachstellen

Published Aug 8, 2023 · Updated Aug 15, 2023 · Revision 3 · de-DE

Vendor: Microsoft Product: Exchange Server 2016 Cumulative Update 23 Product: Exchange Server 2019 Product: Exchange Server 2019 Cumulative Update 12 Product: Exchange Server 2019 Cumulative Update 13 Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Microsoft Exchange Server 2016 und Microsoft Exchange Server 2019 ausnutzen, um seine Privilegien zu erhöhen, beliebigen Programmcode auszuführen oder Dateien zu manipulieren.

Product

Microsoft Exchange Server ist das Serverprodukt für das Client-Server Groupware- und Nachrichtensystem der Firma Microsoft.

Vulnerabilities 6

Critical 9.8

CVE-2023-21709

Microsoft Exchange Server Elevation of Privilege Vulnerability

Microsoft Exchange Server Elevation of Privilege Vulnerability

Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 Microsoft Exchange Server 2019 Cumulative Update 12 Microsoft Exchange Server 2019 Cumulative Update 13

Aug 8, 2023
High 8.8

CVE-2023-35368

Microsoft Exchange Remote Code Execution Vulnerability

Microsoft Exchange Remote Code Execution Vulnerability

Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 Microsoft Exchange Server 2019 Cumulative Update 12 Microsoft Exchange Server 2019 Cumulative Update 13

Aug 8, 2023
High 8.8

CVE-2023-38181 EPSS 11%

Microsoft Exchange Server Spoofing Vulnerability

Microsoft Exchange Server Spoofing Vulnerability

Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 Microsoft Exchange Server 2019 Cumulative Update 12 Microsoft Exchange Server 2019 Cumulative Update 13

Aug 8, 2023
High 8.8

CVE-2023-38185

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 Microsoft Exchange Server 2019 Cumulative Update 12 Microsoft Exchange Server 2019 Cumulative Update 13

Aug 8, 2023
High 8.0

CVE-2023-35388

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 Microsoft Exchange Server 2019 Cumulative Update 12 Microsoft Exchange Server 2019 Cumulative Update 13

Aug 8, 2023
High 8.0

CVE-2023-38182

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 Microsoft Exchange Server 2019 Cumulative Update 12 Microsoft Exchange Server 2019 Cumulative Update 13

Aug 8, 2023

Revision history

2023-08-15 #3
Neue Updates aufgenommen
2023-08-10 #2
Neue Informationen von Microsoft aufgenommen
2023-08-08 #1
Initiale Fassung

References

Re-release of August 2023 Exchange Server Security Update packages vom 2023-08-16
https://techcommunity.microsoft.com/t5/exchange-team-blog/re-release-of-august-2023-exchange-server-security-update/ba-p/3900025
Exchange Server 2019 and 2016 August 2023 security update installation fails on non-English operating systems vom 2023-08-10
https://support.microsoft.com/en-us/topic/exchange-server-2019-and-2016-august-2023-security-update-installation-fails-on-non-english-operating-systems-ef38d805-f645-4511-8cc5-cf967e5d5c75
Microsoft Leitfaden für Sicherheitsupdates vom 2023-08-08
https://msrc.microsoft.com/update-guide