WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Product exchange server✕
Overview 31 matches · 0 in Waratek scope · 0 protected · 20 CISA KEV · 21 public PoC · 21 EPSS ≥ 0.5
31matches 0in Waratek scope0.0% 0protected0.0% 20CISA KEV64.5% 21public PoC67.7% 21EPSS ≥ 0.567.7%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% Outside Waratek scope 0 0.0% Not applicable 31 100.0% Withdrawn CVE 0 0.0%
Critical 6 19.4% High 21 67.7% Medium 4 12.9% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 31 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 31 100.0% Working exploit published 0 0.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 0 0.0%
split by peak 16 / year
Not applicable: 31 Medium: 4High: 21Critical: 6 not blocked: 31 Exploited: 31
20091 Not applicable1 Medium1 not blocked1 Exploited1 20100 20110 20120 20130 20140 20150 20160 20171 Not applicable1 High1 not blocked1 Exploited1 20182 Not applicable2 High2 not blocked2 Exploited2 20190 20203 Not applicable3 High3 not blocked3 Exploited3 202116 Not applicable16 Critical4 High10 Medium2 not blocked16 Exploited16 20224 Not applicable4 Critical1 High2 Medium1 not blocked4 Exploited4 20232 Not applicable2 High2 not blocked2 Exploited2 20241 Not applicable1 Critical1 not blocked1 Exploited1 20250 20261 Not applicable1 High1 not blocked1 Exploited1
201020122014201620182020202220242026
31 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2026-42897 High 2026-05-14 Not applicable Exploited Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
CVE-2024-21410 Critical 2024-02-13 Not applicable Exploited Microsoft Exchange Server Elevation of Privilege Vulnerability
CVE-2023-36745 High 2023-09-12 Not applicable Exploited Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2023-21529 High 2023-02-14 Not applicable Exploited Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2022-41080 Critical 2022-11-09 Not applicable Exploited Microsoft Exchange Server Elevation of Privilege Vulnerability
CVE-2022-41082 High 2022-10-03 Not applicable Exploited Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2022-41040 High 2022-10-03 Not applicable Exploited Microsoft Exchange Server Elevation of Privilege Vulnerability
CVE-2022-24463 Medium 2022-03-09 Not applicable Exploited Microsoft Exchange Server Spoofing Vulnerability
CVE-2021-42321 High 2021-11-10 Not applicable Exploited Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-41349 Medium 2021-11-10 Not applicable Exploited Microsoft Exchange Server Spoofing Vulnerability
CVE-2021-34523 Critical 2021-07-14 Not applicable Exploited Microsoft Exchange Server Elevation of Privilege Vulnerability
CVE-2021-34473 Critical 2021-07-14 Not applicable Exploited Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-34470 High 2021-07-14 Not applicable Exploited Microsoft Exchange Server Elevation of Privilege Vulnerability
CVE-2021-33768 High 2021-07-14 Not applicable Exploited Microsoft Exchange Server Elevation of Privilege Vulnerability
CVE-2021-33766 High 2021-07-14 Not applicable Exploited Microsoft Exchange Server Information Disclosure Vulnerability
CVE-2021-31206 High 2021-07-14 Not applicable Exploited Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-31196 High 2021-07-14 Not applicable Exploited Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-31207 Medium 2021-05-11 Not applicable Exploited Microsoft Exchange Server Security Feature Bypass Vulnerability
CVE-2021-28482 High 2021-04-13 Not applicable Exploited Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-28481 Critical 2021-04-13 Not applicable Exploited Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-27065 High 2021-03-03 Not applicable Exploited Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-26858 High 2021-03-03 Not applicable Exploited Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-26857 High 2021-03-03 Not applicable Exploited Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-26855 Critical 2021-03-03 Not applicable Exploited Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2020-17144 High 2020-12-10 Not applicable Exploited Microsoft Exchange Remote Code Execution Vulnerability
CVE-2020-16875 High 2020-09-11 Not applicable Exploited <p>A remote code execution vulnerability exists in Microsoft Exchange server due to improper validation of cmdlet arguments.</p> <p>An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the System user. Exploitation of the vulnerability requires an authenticated user in a certain Exchange role to be compromised.</p> <p>The security update addresses the vulnerability by correcting how Microsoft Exchange handles cmdlet arguments.</p>
CVE-2020-0688 High 2020-02-11 Not applicable Exploited A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka 'Microsoft Exchange Memory Corruption Vulnerability'.
CVE-2018-8581 High 2018-11-14 Not applicable Exploited An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka "Microsoft Exchange Server Elevation of Privilege Vulnerability." This affects Microsoft Exchange Server.
CVE-2018-0986 High 2018-04-04 Not applicable Exploited A remote code execution vulnerability exists when the Microsoft Malware Protection Engine does not properly scan a specially crafted file, leading to memory corruption, aka "Microsoft Malware Protection Engine Remote Code Execution Vulnerability." This affects Windows Defender, Windows Intune Endpoint Protection, Microsoft Security Essentials, Microsoft System Center Endpoint Protection, Microsoft Exchange Server, Microsoft System Center, Microsoft Forefront Endpoint Protection.
CVE-2017-8540 High 2017-05-26 Not applicable Exploited The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, Microsoft Exchange Server 2013 and 2016, does not properly scan a specially crafted file leading to memory corruption. aka "Microsoft Malware Protection Engine Remote Code Execution Vulnerability", a different vulnerability than CVE-2017-8538 and CVE-2017-8541.
CVE-2009-0099 Medium 2009-02-10 Not applicable Exploited The Electronic Messaging System Microsoft Data Base (EMSMDB32) provider in Microsoft Exchange 2000 Server SP3 and Exchange Server 2003 SP2, as used in Exchange System Attendant, allows remote attackers to cause a denial of service (application outage) via a malformed MAPI command, aka "Literal Processing Vulnerability."