Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:exchange_server:2013:cumulative_update_16:*:*:*:*:*:*

part: a version: 2013 update: cumulative_update_16

VendorMicrosoft (67206627-3ef6-5870-9d98-26a9f2e7065c)
ProductExchange Server (17dc5bb6-7963-5a93-8e97-6e9d34085c50)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-1137 vulnerable 2026-06-08 05:13:24.937261 Details available
A cross-site-scripting (XSS) vulnerability exists when Microsoft Exchange Server does not properly sanitize a specially crafted web request to an affected Exchange server, aka 'Microsoft Exchange Server Spoofing Vulnerability'.
Published: 2019-07-29T14:14:05.000Z
Updated: 2024-08-04T18:06:31.728Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-8621 vulnerable 2026-06-08 05:10:08.639318 Details available
Microsoft Exchange Server 2010 SP3, Exchange Server 2013 SP3, Exchange Server 2013 CU16, and Exchange Server 2016 CU5 allows an open redirect vulnerability that could lead to spoofing, aka "Microsoft Exchange Open Redirect Vulnerability".
Published: 2017-07-11T21:00:00.000Z
Updated: 2024-09-16T23:45:31.629Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-8560 vulnerable 2026-06-08 05:10:08.533900 Details available
Microsoft Exchange Server 2010 SP3, Exchange Server 2013 SP3, Exchange Server 2013 CU16, and Exchange Server 2016 CU5 allows an elevation of privilege vulnerability due to the way that Exchange Outlook Web Access (OWA) handles web requests, aka "Microsoft Exchange Cross-Site Scripting Vulnerability". This CVE ID is unique from CVE-2017-8559.
Published: 2017-07-11T21:00:00.000Z
Updated: 2024-09-16T19:25:25.956Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-8559 vulnerable 2026-06-08 05:10:08.532382 Details available
Microsoft Exchange Server 2010 SP3, Exchange Server 2013 SP3, Exchange Server 2013 CU16, and Exchange Server 2016 CU5 allows an elevation of privilege vulnerability due to the way that Exchange Outlook Web Access (OWA) handles web requests, aka "Microsoft Exchange Cross-Site Scripting Vulnerability". This CVE ID is unique from CVE-2017-8560.
Published: 2017-07-11T21:00:00.000Z
Updated: 2024-09-17T01:06:41.791Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-11761 vulnerable 2026-06-08 05:08:38.396165 Details available
Microsoft Exchange Server 2013 and Microsoft Exchange Server 2016 allow an input sanitization issue with Microsoft Exchange that could potentially result in unintended Information Disclosure, aka "Microsoft Exchange Information Disclosure Vulnerability"
Published: 2017-09-13T01:00:00.000Z
Updated: 2024-09-17T03:02:51.278Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.