Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:exchange_server:2013:cumulative_update_3:*:*:*:*:*:*

part: a version: 2013 update: cumulative_update_3

VendorMicrosoft (67206627-3ef6-5870-9d98-26a9f2e7065c)
ProductExchange Server (17dc5bb6-7963-5a93-8e97-6e9d34085c50)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-1137 vulnerable 2026-06-08 05:13:24.944664 Details available
A cross-site-scripting (XSS) vulnerability exists when Microsoft Exchange Server does not properly sanitize a specially crafted web request to an affected Exchange server, aka 'Microsoft Exchange Server Spoofing Vulnerability'.
Published: 2019-07-29T14:14:05.000Z
Updated: 2024-08-04T18:06:31.728Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-0110 vulnerable 2026-06-08 05:08:25.432880 Details available
Cross-site scripting (XSS) vulnerability in Microsoft Exchange Outlook Web Access (OWA) allows remote attackers to inject arbitrary web script or HTML via a crafted email or chat client, aka "Microsoft Exchange Server Elevation of Privilege Vulnerability."
Published: 2017-03-17T00:00:00.000Z
Updated: 2024-08-05T12:55:18.354Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5072 vulnerable 2026-06-08 05:04:50.737632 Details available
Cross-site scripting (XSS) vulnerability in Outlook Web Access in Microsoft Exchange Server 2010 SP2 and SP3 and 2013 Cumulative Update 2 and 3 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "OWA XSS Vulnerability."
Published: 2013-12-11T00:00:00.000Z
Updated: 2024-08-06T16:59:41.293Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.