Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft_corporation:microsoft_exchange_server_2010_sp3,_exchange_server_2013_sp3,_exchange_server_2013_cu16,_and_exchange_server_2016_cu5.:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMicrosoft Corporation (fc66ce9b-351f-5bf8-b2d9-ed34143ae0dc)
ProductMicrosoft Exchange Server 2010 Sp3, Exchange Server 2013 Sp3, Exchange Server 2013 Cu16, And Exchange Server 2016 Cu5. (7c6efc14-0936-54af-8cba-31ae74602c9c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-8621 vulnerable 2026-06-08 05:10:08.636878 Details available
Microsoft Exchange Server 2010 SP3, Exchange Server 2013 SP3, Exchange Server 2013 CU16, and Exchange Server 2016 CU5 allows an open redirect vulnerability that could lead to spoofing, aka "Microsoft Exchange Open Redirect Vulnerability".
Published: 2017-07-11T21:00:00.000Z
Updated: 2024-09-16T23:45:31.629Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-8560 vulnerable 2026-06-08 05:10:08.533862 Details available
Microsoft Exchange Server 2010 SP3, Exchange Server 2013 SP3, Exchange Server 2013 CU16, and Exchange Server 2016 CU5 allows an elevation of privilege vulnerability due to the way that Exchange Outlook Web Access (OWA) handles web requests, aka "Microsoft Exchange Cross-Site Scripting Vulnerability". This CVE ID is unique from CVE-2017-8559.
Published: 2017-07-11T21:00:00.000Z
Updated: 2024-09-16T19:25:25.956Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-8559 vulnerable 2026-06-08 05:10:08.531831 Details available
Microsoft Exchange Server 2010 SP3, Exchange Server 2013 SP3, Exchange Server 2013 CU16, and Exchange Server 2016 CU5 allows an elevation of privilege vulnerability due to the way that Exchange Outlook Web Access (OWA) handles web requests, aka "Microsoft Exchange Cross-Site Scripting Vulnerability". This CVE ID is unique from CVE-2017-8560.
Published: 2017-07-11T21:00:00.000Z
Updated: 2024-09-17T01:06:41.791Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.