Microsoft Exchange Server 2013 Cumulative Update 12
Approved changes feed: RSS · Atom
cpe:2.3:a:microsoft:exchange_server:2013:cumulative_update_12:*:*:*:*:*:*
part: a version: 2013 update: cumulative_update_12
| Vendor | Microsoft (67206627-3ef6-5870-9d98-26a9f2e7065c) |
|---|---|
| Product | Exchange Server (17dc5bb6-7963-5a93-8e97-6e9d34085c50) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-1137 |
vulnerable | 2026-06-08 05:13:24.934936 |
Details available
A cross-site-scripting (XSS) vulnerability exists when Microsoft Exchange Server does not properly sanitize a specially crafted web request to an affected Exchange server, aka 'Microsoft Exchange Server Spoofing Vulnerability'.
Published: 2019-07-29T14:14:05.000Z
Updated: 2024-08-04T18:06:31.728Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-1136 |
vulnerable | 2026-06-08 05:13:24.929616 |
Details available
An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of Privilege Vulnerability'.
Published: 2019-07-29T14:13:58.000Z
Updated: 2024-08-04T18:06:31.731Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-3378 |
vulnerable | 2026-06-08 05:07:45.302540 |
Details available
Open redirect vulnerability in Microsoft Exchange Server 2013 SP1, 2013 Cumulative Update 12, 2013 Cumulative Update 13, 2016 Cumulative Update 1, and 2016 Cumulative Update 2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL, aka "Microsoft Exchange Open Redirect Vulnerability."
Published: 2016-09-14T10:00:00.000Z
Updated: 2024-08-05T23:56:13.410Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-0138 |
vulnerable | 2026-06-08 05:07:14.122079 |
Details available
Microsoft Exchange Server 2007 SP3, 2010 SP3, 2013 SP1, 2013 Cumulative Update 12, 2013 Cumulative Update 13, 2016 Cumulative Update 1, and 2016 Cumulative Update 2 misparses e-mail messages, which allows remote authenticated users to obtain sensitive Outlook application information by leveraging the Send As right, aka "Microsoft Exchange Information Disclosure Vulnerability."
Published: 2016-09-14T10:00:00.000Z
Updated: 2024-08-05T22:08:13.322Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-0028 |
not_vulnerable | 2026-06-08 05:07:13.990216 |
Details available
Outlook Web Access (OWA) in Microsoft Exchange Server 2013 SP1, Cumulative Update 11, and Cumulative Update 12 and 2016 Gold and Cumulative Update 1 does not properly restrict loading of IMG elements, which makes it easier for remote attackers to track users via a crafted HTML e-mail message, aka "Microsoft Exchange Information Disclosure Vulnerability."
Published: 2016-06-16T01:00:00.000Z
Updated: 2024-08-05T22:08:12.422Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.