Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:exchange_server:2000:sp2:*:*:*:*:*:*

part: a version: 2000 update: sp2

VendorMicrosoft (67206627-3ef6-5870-9d98-26a9f2e7065c)
ProductExchange Server (17dc5bb6-7963-5a93-8e97-6e9d34085c50)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-1193 vulnerable 2026-06-08 04:48:56.497506 Details available
Cross-site scripting (XSS) vulnerability in Microsoft Exchange Server 2000 SP1 through SP3, when running Outlook Web Access (OWA), allows user-assisted remote attackers to inject arbitrary HTML or web script via unknown vectors related to "HTML parsing."
Published: 2006-06-13T19:00:00.000Z
Updated: 2024-08-07T17:03:28.553Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-0714 vulnerable 2026-06-08 04:47:22.291145 Details available
The Internet Mail Service in Exchange Server 5.5 and Exchange 2000 allows remote attackers to cause a denial of service (memory exhaustion) by directly connecting to the SMTP service and sending a certain extended verb request, possibly triggering a buffer overflow in Exchange 2000.
Published: 2003-10-17T04:00:00.000Z
Updated: 2024-08-08T02:05:12.501Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-1876 vulnerable 2026-06-08 04:47:18.379844 Details available
Microsoft Exchange 2000 allows remote authenticated attackers to cause a denial of service via a large number of rapid requests, which consumes all of the licenses that are granted to Exchange by IIS.
Published: 2005-06-28T04:00:00.000Z
Updated: 2024-09-16T23:11:02.137Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-1873 vulnerable 2026-06-08 04:47:18.372883 Details available
Microsoft Exchange 2000, when used with Microsoft Remote Procedure Call (MSRPC), allows remote attackers to cause a denial of service (crash or memory consumption) via malformed MSRPC calls.
Published: 2005-06-28T04:00:00.000Z
Updated: 2024-09-16T17:59:15.901Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-0507 vulnerable 2026-06-08 04:46:21.591692 Details available
An interaction between Microsoft Outlook Web Access (OWA) with RSA SecurID allows local users to bypass the SecurID authentication for a previous user via several submissions of an OWA Authentication request with the proper OWA password for the previous user, which is eventually accepted by OWA.
Published: 2002-06-11T04:00:00.000Z
Updated: 2024-08-08T02:49:28.979Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-0368 vulnerable 2026-06-08 04:46:21.298082 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-0055 vulnerable 2026-06-08 04:46:20.515430 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.