VDB
CVE-2023-35368
CVE-2023-35368
PUBLISHED
In Microsoft Exchange Server 2016 und Microsoft Exchange Server 2019 existieren mehrere Schwachstellen. Microsoft veröffentlicht keine Details zu den Schwachstellen. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode auszuführen oder Dateien zu manipulieren.
EPSS 0.37% · 59.4th percentile
Risk Scores
EPSS Score
0.37%
59.4th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Microsoft Exchange Server 2019 Cumulative Update 12 | |
| Microsoft | Microsoft Exchange Server 2019 Cumulative Update 13 | |
| Microsoft | Microsoft Exchange Server 2016 Cumulative Update 23 |
Exploit Intelligence
- https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1 (msrc)
- Microsoft Exchange Remote Code Execution Vulnerability (circl)
- Invoke-AnalyzerSecurityCveCheck.ps1 (github-poc)
- Invoke-AnalyzerSecurityCveCheck.ps1 (github-poc)
- Invoke-AnalyzerSecurityCveCheck.ps1 (github-poc)
- Invoke-AnalyzerSecurityCveCheck.ps1 (github-poc)
- Invoke-AnalyzerSecurityCveCheck.ps1 (github-poc)
- Invoke-AnalyzerSecurityCveCheck.ps1 (github-poc)
- Invoke-AnalyzerSecurityCveCheck.ps1 (github-poc)
Timeline
- Aug 8, 2023 CVE Published
- Aug 9, 2023 EPSS Score
- Aug 15, 2023 CVE Updated
- Sep 12, 2023 EPSS Score
- Oct 15, 2023 EPSS Score
- Dec 21, 2023 EPSS Score
- Jan 24, 2024 EPSS Score
- Feb 27, 2024 EPSS Score
- Mar 31, 2024 EPSS Score
- May 4, 2024 EPSS Score
- Jul 10, 2024 EPSS Score
- Aug 13, 2024 EPSS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-1990.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-1990 advisory
- https://techcommunity.microsoft.com/t5/exchange-team-blog/re-release-of-august-2023-exchange-server-security-update/ba-p/3900025 advisory
- https://support.microsoft.com/en-us/topic/exchange-server-2019-and-2016-august-2023-security-update-installation-fails-on-non-english-operating-systems-ef38d805-f645-4511-8cc5-cf967e5d5c75 advisory
- https://msrc.microsoft.com/update-guide advisory