Microsoft Exchange Server 2013 Cumulative Update 7
Approved changes feed: RSS · Atom
cpe:2.3:a:microsoft:exchange_server:2013:cumulative_update_7:*:*:*:*:*:*
part: a version: 2013 update: cumulative_update_7
| Vendor | Microsoft (67206627-3ef6-5870-9d98-26a9f2e7065c) |
|---|---|
| Product | Exchange Server (17dc5bb6-7963-5a93-8e97-6e9d34085c50) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-1137 |
vulnerable | 2026-06-08 05:13:24.946589 |
Details available
A cross-site-scripting (XSS) vulnerability exists when Microsoft Exchange Server does not properly sanitize a specially crafted web request to an affected Exchange server, aka 'Microsoft Exchange Server Spoofing Vulnerability'.
Published: 2019-07-29T14:14:05.000Z
Updated: 2024-08-04T18:06:31.728Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-1632 |
vulnerable | 2026-06-08 05:06:25.961229 |
Details available
Cross-site scripting (XSS) vulnerability in errorfe.aspx in Outlook Web App (OWA) in Microsoft Exchange Server 2013 SP1 and Cumulative Update 7 allows remote attackers to inject arbitrary web script or HTML via the msgParam parameter in an authError action, aka "Exchange Error Message Cross Site Scripting Vulnerability."
Published: 2015-03-11T10:00:00.000Z
Updated: 2024-08-06T04:47:17.483Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-1631 |
vulnerable | 2026-06-08 05:06:25.960927 |
Details available
Microsoft Exchange Server 2013 SP1 and Cumulative Update 7 allows remote attackers to spoof meeting organizers via unspecified vectors, aka "Exchange Forged Meeting Request Spoofing Vulnerability."
Published: 2015-03-11T10:00:00.000Z
Updated: 2024-08-06T04:47:17.589Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-1630 |
vulnerable | 2026-06-08 05:06:25.960638 |
Details available
Cross-site scripting (XSS) vulnerability in Outlook Web App (OWA) in Microsoft Exchange Server 2013 SP1 and Cumulative Update 7 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "Audit Report Cross Site Scripting Vulnerability."
Published: 2015-03-11T10:00:00.000Z
Updated: 2024-08-06T04:47:17.492Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-1629 |
vulnerable | 2026-06-08 05:06:25.960331 |
Details available
Cross-site scripting (XSS) vulnerability in Outlook Web App (OWA) in Microsoft Exchange Server 2013 SP1 and Cumulative Update 7 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "ExchangeDLP Cross Site Scripting Vulnerability."
Published: 2015-03-11T10:00:00.000Z
Updated: 2024-08-06T04:47:17.643Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-1628 |
vulnerable | 2026-06-08 05:06:25.959348 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.