Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:exchange_server:2013:cumulative_update_14:*:*:*:*:*:*

part: a version: 2013 update: cumulative_update_14

VendorMicrosoft (67206627-3ef6-5870-9d98-26a9f2e7065c)
ProductExchange Server (17dc5bb6-7963-5a93-8e97-6e9d34085c50)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-1137 vulnerable 2026-06-08 05:13:24.935800 Details available
A cross-site-scripting (XSS) vulnerability exists when Microsoft Exchange Server does not properly sanitize a specially crafted web request to an affected Exchange server, aka 'Microsoft Exchange Server Spoofing Vulnerability'.
Published: 2019-07-29T14:14:05.000Z
Updated: 2024-08-04T18:06:31.728Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-0110 vulnerable 2026-06-08 05:08:25.432038 Details available
Cross-site scripting (XSS) vulnerability in Microsoft Exchange Outlook Web Access (OWA) allows remote attackers to inject arbitrary web script or HTML via a crafted email or chat client, aka "Microsoft Exchange Server Elevation of Privilege Vulnerability."
Published: 2017-03-17T00:00:00.000Z
Updated: 2024-08-05T12:55:18.354Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.