Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_11:*:*:*:*:*:*

part: a version: 2016 update: cumulative_update_11

VendorMicrosoft (67206627-3ef6-5870-9d98-26a9f2e7065c)
ProductExchange Server (17dc5bb6-7963-5a93-8e97-6e9d34085c50)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-42897 vulnerable 2026-06-08 08:03:16.909366 Microsoft Exchange Server Spoofing Vulnerability
HIGH (8.1)
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
Published: 2026-05-14T17:00:36.515Z
Updated: 2026-06-19T16:12:39.764Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-64667 vulnerable 2026-06-08 07:39:20.085632 Microsoft Exchange Server Spoofing Vulnerability
MEDIUM (5.3)
User interface (ui) misrepresentation of critical information in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
Published: 2025-12-09T17:55:44.488Z
Updated: 2026-04-16T14:18:39.361Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-64666 vulnerable 2026-06-08 07:39:20.051407 Microsoft Exchange Server Elevation of Privilege Vulnerability
HIGH (7.5)
Improper input validation in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
Published: 2025-12-09T17:55:45.263Z
Updated: 2026-04-16T14:18:39.837Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59249 vulnerable 2026-06-08 07:35:21.381647 Microsoft Exchange Server Elevation of Privilege Vulnerability
HIGH (8.8)
Weak authentication in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
Published: 2025-10-14T17:00:42.051Z
Updated: 2026-02-26T17:47:16.347Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59248 vulnerable 2026-06-08 07:35:21.350633 Microsoft Exchange Server Spoofing Vulnerability
HIGH (7.5)
Improper input validation in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
Published: 2025-10-14T17:01:42.916Z
Updated: 2026-02-22T17:26:02.096Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-53782 vulnerable 2026-06-08 07:31:15.404017 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-33051 vulnerable 2026-06-08 07:19:01.461865 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-25007 vulnerable 2026-06-08 07:12:50.460806 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-25006 vulnerable 2026-06-08 07:12:50.457743 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-25005 vulnerable 2026-06-08 07:12:50.424634 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-49040 vulnerable 2026-06-08 06:50:12.138003 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-26198 vulnerable 2026-06-08 06:31:25.403199 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-36777 vulnerable 2026-06-08 06:08:13.356549 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-21709 vulnerable 2026-06-08 05:54:22.076789 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-27065 vulnerable 2026-06-08 05:30:45.851978 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26858 vulnerable 2026-06-08 05:30:45.308873 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26857 vulnerable 2026-06-08 05:30:45.304926 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26855 vulnerable 2026-06-08 05:30:45.297811 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-1137 vulnerable 2026-06-08 05:13:24.950878 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-0858 vulnerable 2026-06-08 05:12:20.859390 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-0817 vulnerable 2026-06-08 05:12:20.764594 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-0588 vulnerable 2026-06-08 05:12:20.092485 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-0586 vulnerable 2026-06-08 05:12:20.089451 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-8604 vulnerable 2026-06-08 05:12:06.255204 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.