Microsoft Exchange Server 2013 Cumulative Update 8
Approved changes feed: RSS · Atom
cpe:2.3:a:microsoft:exchange_server:2013:cumulative_update_8:*:*:*:*:*:*
part: a version: 2013 update: cumulative_update_8
| Vendor | Microsoft (67206627-3ef6-5870-9d98-26a9f2e7065c) |
|---|---|
| Product | Exchange Server (17dc5bb6-7963-5a93-8e97-6e9d34085c50) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-1137 |
vulnerable | 2026-06-08 05:13:24.947322 |
Details available
A cross-site-scripting (XSS) vulnerability exists when Microsoft Exchange Server does not properly sanitize a specially crafted web request to an affected Exchange server, aka 'Microsoft Exchange Server Spoofing Vulnerability'.
Published: 2019-07-29T14:14:05.000Z
Updated: 2024-08-04T18:06:31.728Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-2544 |
vulnerable | 2026-06-08 05:06:35.203816 |
Details available
Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) in Microsoft Exchange Server 2013 Cumulative Update 8 and 9 and SP1 allows remote attackers to inject arbitrary web script or HTML via a crafted e-mail message, aka "Exchange Spoofing Vulnerability."
Published: 2015-09-09T00:00:00.000Z
Updated: 2024-08-06T05:17:27.242Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-2543 |
vulnerable | 2026-06-08 05:06:35.203488 |
Details available
Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) in Microsoft Exchange Server 2013 Cumulative Update 8 and 9 allows remote attackers to inject arbitrary web script or HTML via a crafted e-mail message, aka "Exchange Spoofing Vulnerability."
Published: 2015-09-09T00:00:00.000Z
Updated: 2024-08-06T05:17:27.272Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-2505 |
vulnerable | 2026-06-08 05:06:35.153858 |
Details available
Outlook Web Access (OWA) in Microsoft Exchange Server 2013 Cumulative Update 8 and 9 and SP1 allows remote attackers to obtain sensitive stacktrace information via a crafted request, aka "Exchange Information Disclosure Vulnerability."
Published: 2015-09-09T00:00:00.000Z
Updated: 2024-08-06T05:17:27.130Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-2359 |
vulnerable | 2026-06-08 05:06:34.893095 |
Details available
Cross-site scripting (XSS) vulnerability in the web applications in Microsoft Exchange Server 2013 Cumulative Update 8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Exchange HTML Injection Vulnerability."
Published: 2015-06-10T01:00:00.000Z
Updated: 2024-08-06T05:10:16.071Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-1771 |
vulnerable | 2026-06-08 05:06:26.177044 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-1764 |
vulnerable | 2026-06-08 05:06:26.168386 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.