ES
Email
Exchange Server
On CISA KEVExploited in the wildRansomware-linked
258
CVEs
20
On KEV
9.8
Max CVSS
3
New 30D
Severity mix
Critical 23High 92Medium 66Low 0
Watch
Add Exchange Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2000-0216 | – | Feb 29 | Microsoft email clients in Outlook, Exchange, and Windows Messaging automatically respond to Read Receipt and Delivery Receipt tags, which could allow an attacker to flood a mail… Affected: All versions, or not specified |
| CVE-1999-1043 | – | Dec 31 | Microsoft Exchange Server 5.5 and 5.0 does not properly handle (1) malformed NNTP data, or (2) malformed SMTP data, which allows remote attackers to cause a denial of service… Affected: 5.0; 5.5 |
| CVE-1999-0993 | – | Dec 13 | Modifications to ACLs (Access Control Lists) in Microsoft Exchange 5.5 do not take effect until the directory store cache is refreshed Affected: 5.0; 5.5 |
| CVE-1999-0682 | – | Aug 6 | Microsoft Exchange 5.5 allows a remote attacker to relay email (i.e Affected: 5.5; 5.5; 5.5 |
| CVE-1999-0385 | – | Dec 1 | The LDAP bind function in Exchange 5.5 has a buffer overflow that allows a remote attacker to conduct a denial of service or execute commands Affected: 5.5 |
| CVE-1999-1322 | – | Nov 12 | The installation of 1ArcServe Backup and Inoculan AV client modules for Exchange create a log file, exchverify.log, which contains usernames and passwords in plaintext Affected: All versions, or not specified |
| CVE-1999-0007 | – | Jun 26 | Information from SSL-encrypted sessions via PKCS #1 Affected: 5.5 |
| CVE-1999-0284 | – | Jan 1 | Denial of service to NT mail servers including Ipswitch, Mdaemon, and Exchange through a buffer overflow in the SMTP HELO command Affected: 4.0; 5.0 |