High WID-SEC-2023-2332 5 CVEs

Microsoft Exchange Server: Mehrere Schwachstellen

Published Sep 12, 2023 · Updated Sep 12, 2023 · de-DE

Vendor: Microsoft Product: Exchange Server 2016 Cumulative Update 23 Product: Exchange Server 2019 Product: Exchange Server 2019 Cumulative Update 12 Product: Exchange Server 2019 Cumulative Update 13 Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in Microsoft Exchange Server ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen offenzulegen und Informationen falsch darzustellen.

Product

Microsoft Exchange Server ist das Serverprodukt für das Client-Server Groupware- und Nachrichtensystem der Firma Microsoft.

Vulnerabilities 5

High 8.0

CVE-2023-36744 EPSS 57%

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 Microsoft Exchange Server 2019 Cumulative Update 12 Microsoft Exchange Server 2019 Cumulative Update 13

Sep 12, 2023
High 8.0

CVE-2023-36745 Public exploit EPSS 76%

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 Microsoft Exchange Server 2019 Cumulative Update 12 Microsoft Exchange Server 2019 Cumulative Update 13

Sep 12, 2023
High 8.0

CVE-2023-36756 EPSS 49%

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 Microsoft Exchange Server 2019 Cumulative Update 12 Microsoft Exchange Server 2019 Cumulative Update 13

Sep 12, 2023
High 8.0

CVE-2023-36757 EPSS 37%

Microsoft Exchange Server Spoofing Vulnerability

Microsoft Exchange Server Spoofing Vulnerability

Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 Microsoft Exchange Server 2019 Cumulative Update 12 Microsoft Exchange Server 2019 Cumulative Update 13

Sep 12, 2023
Medium 5.7

CVE-2023-36777 EPSS 52%

Microsoft Exchange Server Information Disclosure Vulnerability

Microsoft Exchange Server Information Disclosure Vulnerability

Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 Microsoft Exchange Server 2019 Cumulative Update 12 Microsoft Exchange Server 2019 Cumulative Update 13

Sep 12, 2023

Revision history

2023-09-12 #1
Initiale Fassung

References

Microsoft Leitfaden für Sicherheitsupdates vom 2023-09-12
https://msrc.microsoft.com/update-guide