Vulnerabilities > Microsoft > Exchange Server > 2010
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2020-02-11 | CVE-2020-0688 | Improper Authentication vulnerability in Microsoft Exchange Server A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka 'Microsoft Exchange Memory Corruption Vulnerability'. | 8.8 |
| 2019-07-15 | CVE-2019-1136 | Unspecified vulnerability in Microsoft Exchange Server 2010/2013 An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of Privilege Vulnerability'. | 8.1 |
| 2019-07-15 | CVE-2019-1084 | Information Exposure vulnerability in Microsoft products An information disclosure vulnerability exists when Exchange allows creation of entities with Display Names having non-printable characters. | 6.5 |
| 2019-04-09 | CVE-2019-0817 | Data Processing Errors vulnerability in Microsoft Exchange Server A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access (OWA) fails to properly handle web requests, aka 'Microsoft Exchange Spoofing Vulnerability'. | 5.4 |
| 2019-03-05 | CVE-2019-0724 | Unspecified vulnerability in Microsoft Exchange Server An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of Privilege Vulnerability'. | 8.1 |
| 2019-03-05 | CVE-2019-0686 | Unspecified vulnerability in Microsoft Exchange Server An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of Privilege Vulnerability'. | 7.4 |
| 2019-01-08 | CVE-2019-0588 | Incorrect Permission Assignment for Critical Resource vulnerability in Microsoft Exchange Server An information disclosure vulnerability exists when the Microsoft Exchange PowerShell API grants calendar contributors more view permissions than intended, aka "Microsoft Exchange Information Disclosure Vulnerability." This affects Microsoft Exchange Server. | 6.5 |
| 2018-11-14 | CVE-2018-8581 | Unspecified vulnerability in Microsoft Exchange Server An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka "Microsoft Exchange Server Elevation of Privilege Vulnerability." This affects Microsoft Exchange Server. | 7.4 |
| 2018-09-21 | CVE-2018-16793 | Server-Side Request Forgery (SSRF) vulnerability in Microsoft Exchange Server 2010 Rollup 18 for Microsoft Exchange Server 2010 SP3 and previous versions has an SSRF vulnerability via the username parameter in /owa/auth/logon.aspx in the OWA (Outlook Web Access) login page. | 8.6 |
| 2018-08-15 | CVE-2018-8302 | Out-of-bounds Write vulnerability in Microsoft Exchange Server 2010/2013/2016 A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka "Microsoft Exchange Memory Corruption Vulnerability." This affects Microsoft Exchange Server. | 9.8 |