GCVE - cpe:2.3:a:microsoft:exchange_server:2013:-:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:exchange_server:2013:-:*:*:*:*:*:*

part: a version: 2013 update: -

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Exchange Server (`17dc5bb6-7963-5a93-8e97-6e9d34085c50`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-3146`	not_vulnerable	2026-06-08 05:33:50.881830	Details available The Dolby Audio X2 (DAX2) API service before 0.8.8.90 on Windows allows local users to gain privileges. Published: 2021-04-08T19:46:48.000Z Updated: 2024-08-03T16:45:51.370Z Open on db.gcve.eu Reference links https://professional.dolby.com/siteassets/pdfs/dolby-dax2-security-advisory-2021-04-07.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-1137`	vulnerable	2026-06-08 05:13:24.932509	Details available A cross-site-scripting (XSS) vulnerability exists when Microsoft Exchange Server does not properly sanitize a specially crafted web request to an affected Exchange server, aka 'Microsoft Exchange Server Spoofing Vulnerability'. Published: 2019-07-29T14:14:05.000Z Updated: 2024-08-04T18:06:31.728Z Open on db.gcve.eu Reference links https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1137	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-8581`	vulnerable	2026-06-08 05:12:06.220705	Details available An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka "Microsoft Exchange Server Elevation of Privilege Vulnerability." This affects Microsoft Exchange Server. Published: 2018-11-14T01:00:00.000Z Updated: 2025-10-21T23:45:47.294Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id/1042141 http://www.securityfocus.com/bid/105837 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8581	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-0986`	vulnerable	2026-06-08 05:10:25.227384	Details available A remote code execution vulnerability exists when the Microsoft Malware Protection Engine does not properly scan a specially crafted file, leading to memory corruption, aka "Microsoft Malware Protection Engine Remote Code Execution Vulnerability." This affects Windows Defender, Windows Intune Endpoint Protection, Microsoft Security Essentials, Microsoft System Center Endpoint Protection, Microsoft Exchange Server, Microsoft System Center, Microsoft Forefront Endpoint Protection. Published: 2018-04-04T17:00:00.000Z Updated: 2024-08-05T03:44:11.806Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id/1040631 http://www.securityfocus.com/bid/103593 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0986 https://www.exploit-db.com/exploits/44402/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-8540`	vulnerable	2026-06-08 05:10:08.477057	Details available The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, Microsoft Exchange Server 2013 and 2016, does not properly scan a specially crafted file leading to memory corruption. aka "Microsoft Malware Protection Engine Remote Code Execution Vulnerability", a different vulnerability than CVE-2017-8538 and CVE-2017-8541. Published: 2017-05-26T20:00:00.000Z Updated: 2025-10-21T23:55:40.255Z Open on db.gcve.eu Reference links https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8540 http://www.securityfocus.com/bid/98703 https://www.exploit-db.com/exploits/42088/ http://www.securitytracker.com/id/1038571	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-8537`	vulnerable	2026-06-08 05:10:08.460759	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-8536`	vulnerable	2026-06-08 05:10:08.459562	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-8535`	vulnerable	2026-06-08 05:10:08.454785	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.