Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_20:*:*:*:*:*:*

part: a version: 2016 update: cumulative_update_20

VendorMicrosoft (67206627-3ef6-5870-9d98-26a9f2e7065c)
ProductExchange Server (17dc5bb6-7963-5a93-8e97-6e9d34085c50)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-42897 vulnerable 2026-06-08 08:03:16.928159 Microsoft Exchange Server Spoofing Vulnerability
HIGH (8.1)
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
Published: 2026-05-14T17:00:36.515Z
Updated: 2026-06-19T16:12:39.764Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-64667 vulnerable 2026-06-08 07:39:20.086145 Microsoft Exchange Server Spoofing Vulnerability
MEDIUM (5.3)
User interface (ui) misrepresentation of critical information in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
Published: 2025-12-09T17:55:44.488Z
Updated: 2026-04-16T14:18:39.361Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-64666 vulnerable 2026-06-08 07:39:20.060512 Microsoft Exchange Server Elevation of Privilege Vulnerability
HIGH (7.5)
Improper input validation in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
Published: 2025-12-09T17:55:45.263Z
Updated: 2026-04-16T14:18:39.837Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59249 vulnerable 2026-06-08 07:35:21.382077 Microsoft Exchange Server Elevation of Privilege Vulnerability
HIGH (8.8)
Weak authentication in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
Published: 2025-10-14T17:00:42.051Z
Updated: 2026-02-26T17:47:16.347Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59248 vulnerable 2026-06-08 07:35:21.362040 Microsoft Exchange Server Spoofing Vulnerability
HIGH (7.5)
Improper input validation in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
Published: 2025-10-14T17:01:42.916Z
Updated: 2026-02-22T17:26:02.096Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-53782 vulnerable 2026-06-08 07:31:15.412330 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-33051 vulnerable 2026-06-08 07:19:01.470252 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-25007 vulnerable 2026-06-08 07:12:50.461662 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-25006 vulnerable 2026-06-08 07:12:50.458180 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-25005 vulnerable 2026-06-08 07:12:50.433725 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-49040 vulnerable 2026-06-08 06:50:12.148303 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-26198 vulnerable 2026-06-08 06:31:25.416171 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-36777 vulnerable 2026-06-08 06:08:13.365580 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-21709 vulnerable 2026-06-08 05:54:22.087472 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34523 vulnerable 2026-06-08 05:32:13.683656 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34473 vulnerable 2026-06-08 05:32:13.494406 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33768 vulnerable 2026-06-08 05:32:12.430807 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33766 vulnerable 2026-06-08 05:32:12.426709 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-31209 vulnerable 2026-06-08 05:31:52.268690 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-31207 vulnerable 2026-06-08 05:31:52.267744 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-31206 vulnerable 2026-06-08 05:31:52.267116 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-31198 vulnerable 2026-06-08 05:31:52.220764 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-31196 vulnerable 2026-06-08 05:31:52.218196 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-31195 vulnerable 2026-06-08 05:31:52.217043 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28483 vulnerable 2026-06-08 05:31:24.395723 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28482 vulnerable 2026-06-08 05:31:24.395245 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28481 vulnerable 2026-06-08 05:31:24.394609 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28480 vulnerable 2026-06-08 05:31:24.393552 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.