Microsoft Exchange Server 2013 Cumulative Update 6
Approved changes feed: RSS · Atom
cpe:2.3:a:microsoft:exchange_server:2013:cumulative_update_6:*:*:*:*:*:*
part: a version: 2013 update: cumulative_update_6
| Vendor | Microsoft (67206627-3ef6-5870-9d98-26a9f2e7065c) |
|---|---|
| Product | Exchange Server (17dc5bb6-7963-5a93-8e97-6e9d34085c50) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-1137 |
vulnerable | 2026-06-08 05:13:24.945762 |
Details available
A cross-site-scripting (XSS) vulnerability exists when Microsoft Exchange Server does not properly sanitize a specially crafted web request to an affected Exchange server, aka 'Microsoft Exchange Server Spoofing Vulnerability'.
Published: 2019-07-29T14:14:05.000Z
Updated: 2024-08-04T18:06:31.728Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-6336 |
vulnerable | 2026-06-08 05:05:57.455999 |
Details available
Outlook Web App (OWA) in Microsoft Exchange Server 2013 SP1 and Cumulative Update 6 does not properly validate redirection tokens, which allows remote attackers to redirect users to arbitrary web sites and spoof the origin of e-mail messages via unspecified vectors, aka "Exchange URL Redirection Vulnerability."
Published: 2014-12-11T00:00:00.000Z
Updated: 2024-08-06T12:10:13.299Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-6326 |
vulnerable | 2026-06-08 05:05:57.439280 |
Details available
Cross-site scripting (XSS) vulnerability in Microsoft Exchange Server 2013 SP1 and Cumulative Update 6 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "OWA XSS Vulnerability," a different vulnerability than CVE-2014-6325.
Published: 2014-12-11T00:00:00.000Z
Updated: 2024-08-06T12:10:13.332Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-6325 |
vulnerable | 2026-06-08 05:05:57.438987 |
Details available
Cross-site scripting (XSS) vulnerability in Microsoft Exchange Server 2013 SP1 and Cumulative Update 6 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "OWA XSS Vulnerability," a different vulnerability than CVE-2014-6326.
Published: 2014-12-11T00:00:00.000Z
Updated: 2024-08-06T12:10:13.301Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-6319 |
vulnerable | 2026-06-08 05:05:57.429755 |
Details available
Outlook Web App (OWA) in Microsoft Exchange Server 2007 SP3, 2010 SP3, and 2013 SP1 and Cumulative Update 6 does not properly validate tokens in requests, which allows remote attackers to spoof the origin of e-mail messages via unspecified vectors, aka "Outlook Web App Token Spoofing Vulnerability."
Published: 2014-12-11T00:00:00.000Z
Updated: 2024-08-06T12:10:13.366Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.