Microsoft ≫ Exchange Server

Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

Use of a broken or risky cryptographic algorithm in Microsoft Exchange Server allows an unauthorized attacker to disclose information over a network.

Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

Authorization bypass through user-controlled key in Microsoft Exchange Server allows an authorized attacker to perform tampering over a network.

Uncontrolled recursion in Microsoft Exchange Server allows an unauthorized attacker to deny service over a network.

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.

Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network.

External control of file name or path in Microsoft Exchange Server allows an authorized attacker to execute code over a network.

Double free in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.

Authentication bypass by capture-replay in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.