Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:exchange_server:2007:sp3:*:*:*:*:*:*

part: a version: 2007 update: sp3

VendorMicrosoft (67206627-3ef6-5870-9d98-26a9f2e7065c)
ProductExchange Server (17dc5bb6-7963-5a93-8e97-6e9d34085c50)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-0138 vulnerable 2026-06-08 05:07:14.121268 Details available
Microsoft Exchange Server 2007 SP3, 2010 SP3, 2013 SP1, 2013 Cumulative Update 12, 2013 Cumulative Update 13, 2016 Cumulative Update 1, and 2016 Cumulative Update 2 misparses e-mail messages, which allows remote authenticated users to obtain sensitive Outlook application information by leveraging the Send As right, aka "Microsoft Exchange Information Disclosure Vulnerability."
Published: 2016-09-14T10:00:00.000Z
Updated: 2024-08-05T22:08:13.322Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-6319 vulnerable 2026-06-08 05:05:57.428073 Details available
Outlook Web App (OWA) in Microsoft Exchange Server 2007 SP3, 2010 SP3, and 2013 SP1 and Cumulative Update 6 does not properly validate tokens in requests, which allows remote attackers to spoof the origin of e-mail messages via unspecified vectors, aka "Outlook Web App Token Spoofing Vulnerability."
Published: 2014-12-11T00:00:00.000Z
Updated: 2024-08-06T12:10:13.366Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0418 vulnerable 2026-06-08 05:03:47.553696 Details available
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.7 and 8.4 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2013-0393. NOTE: the previous information was obtained from the January 2013 CPU. Oracle has not commented on claims from an independent researcher that this is a heap-based buffer overflow in the Paradox database stream filter (vspdx.dll) that can be triggered using a table header with a crafted "number of fields" value.
Published: 2013-01-17T01:30:00.000Z
Updated: 2024-08-06T14:25:10.255Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4791 vulnerable 2026-06-08 05:02:52.639116 Details available
Microsoft Exchange Server 2007 SP3 and 2010 SP1 and SP2 allows remote authenticated users to cause a denial of service (Information Store service hang) by subscribing to a crafted RSS feed, aka "RSS Feed May Cause Exchange DoS Vulnerability."
Published: 2012-12-12T00:00:00.000Z
Updated: 2024-08-06T20:50:16.893Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.