Overview 279 matches · 5 in Waratek scope · 2 protected · 31 exploited · 20 CISA KEV · 43 public PoC · 36 EPSS ≥ 0.5
279matches
5in Waratek scope1.8%
2protected0.7%
31exploited11.1%
20CISA KEV7.2%
43public PoC15.4%
36EPSS ≥ 0.512.9%
Protected by Waratek
2
0.7%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
3
1.1%
Outside Waratek scope
3
1.1%
Not applicable
271
97.1%
Withdrawn CVE
0
0.0%
blocked by ARMR today
2
0.7%
partly blocked
0
0.0%
not blocked
277
99.3%
not established
0
0.0%
unrecorded
0
0.0%
split by
peak 33 / year
19984
Not applicable4
High2
Medium2
not blocked4
Working exploit published1
No public exploit3
19993
Not applicable3
High1
Medium2
not blocked3
No public exploit3
20003
Not applicable3
Medium3
not blocked3
No public exploit3
200110
Not applicable10
High3
Medium6
Low1
not blocked10
No public exploit10
20029
Not applicable9
High2
Medium5
Low2
not blocked9
Working exploit published1
No public exploit8
20033
Not applicable3
High1
Medium2
not blocked3
Working exploit published1
No public exploit2
20044
Not applicable4
High2
Medium2
not blocked4
Working exploit published1
No public exploit3
20057
Not applicable7
High3
Medium4
not blocked7
Working exploit published2
No public exploit5
20063
Not applicable3
High2
Low1
not blocked3
Working exploit published1
Forecast only1
No public exploit1
20075
Not applicable5
High3
Medium2
not blocked5
Working exploit published1
No public exploit4
20085
Not applicable5
Medium5
not blocked5
Working exploit published1
No public exploit4
20092
Not applicable2
High1
Medium1
not blocked2
Exploited1
No public exploit1
20106
Not applicable6
Medium6
not blocked6
Working exploit published1
No public exploit5
20110
20121
Not applicable1
Low1
not blocked1
No public exploit1
20132
Outside Waratek scope1
Not applicable1
Medium2
not blocked2
No public exploit2
20144
Not applicable4
Medium3
Low1
not blocked4
No public exploit4
201515
Not applicable15
Medium12
Low3
not blocked15
No public exploit15
20168
Not applicable8
High2
Medium6
not blocked8
No public exploit8
201711
Not applicable11
High2
Medium9
not blocked11
Exploited1
Working exploit published3
No public exploit7
201820
No exploit published1
Not applicable19
Critical5
High4
Medium11
not blocked20
Exploited2
No public exploit18
201915
No exploit published2
Outside Waratek scope1
Not applicable12
Critical2
High4
Medium9
not blocked15
No public exploit15
202017
Protected by Waratek2
Outside Waratek scope1
Not applicable14
Critical2
High9
Medium6
blocked by ARMR today2
not blocked15
Exploited3
Working exploit published1
Forecast only1
No public exploit12
202131
Not applicable31
Critical9
High16
Medium6
not blocked31
Exploited16
Working exploit published2
Proof of concept only2
No public exploit11
202218
Not applicable18
Critical4
High10
Medium4
not blocked18
Exploited4
Working exploit published1
No public exploit13
202327
Not applicable27
Critical1
High25
Medium1
not blocked27
Exploited2
Proof of concept only2
Forecast only4
No public exploit19
20243
Not applicable3
Critical1
High2
not blocked3
Exploited1
Proof of concept only1
No public exploit1
202510
Not applicable10
High6
Medium4
not blocked10
No public exploit10
202633
Not applicable33
Critical3
High21
Medium9
not blocked33
Exploited1
Proof of concept only2
No public exploit30
1999200220052008201120142017202020232026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2015-2359 | Medium | 2015-06-10 | Not applicable | No public exploit | Cross-site scripting (XSS) vulnerability in the web applications in Microsoft Exchange Server 2013 Cumulative Update 8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Exchange HTML Injection Vulnerability." |
| CVE-2015-1771 | Medium | 2015-06-10 | Not applicable | No public exploit | Cross-site request forgery (CSRF) vulnerability in the web applications in Microsoft Exchange Server 2013 SP1 and Cumulative Update 8 allows remote attackers to hijack the authentication of arbitrary users, aka "Exchange Cross-Site Request Forgery Vulnerability." |
| CVE-2015-1764 | Medium | 2015-06-10 | Not applicable | No public exploit | The web applications in Microsoft Exchange Server 2013 SP1 and Cumulative Update 8 allow remote attackers to bypass the Same Origin Policy and send HTTP traffic to intranet servers via a crafted request, related to a Server-Side Request Forgery (SSRF) issue, aka "Exchange Server-Side Request Forgery Vulnerability." |
| CVE-2015-1632 | Medium | 2015-03-11 | Not applicable | No public exploit | Cross-site scripting (XSS) vulnerability in errorfe.aspx in Outlook Web App (OWA) in Microsoft Exchange Server 2013 SP1 and Cumulative Update 7 allows remote attackers to inject arbitrary web script or HTML via the msgParam parameter in an authError action, aka "Exchange Error Message Cross Site Scripting Vulnerability." |
| CVE-2015-1631 | Medium | 2015-03-11 | Not applicable | No public exploit | Microsoft Exchange Server 2013 SP1 and Cumulative Update 7 allows remote attackers to spoof meeting organizers via unspecified vectors, aka "Exchange Forged Meeting Request Spoofing Vulnerability." |
| CVE-2015-1630 | Medium | 2015-03-11 | Not applicable | No public exploit | Cross-site scripting (XSS) vulnerability in Outlook Web App (OWA) in Microsoft Exchange Server 2013 SP1 and Cumulative Update 7 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "Audit Report Cross Site Scripting Vulnerability." |
| CVE-2015-1629 | Medium | 2015-03-11 | Not applicable | No public exploit | Cross-site scripting (XSS) vulnerability in Outlook Web App (OWA) in Microsoft Exchange Server 2013 SP1 and Cumulative Update 7 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "ExchangeDLP Cross Site Scripting Vulnerability." |
| CVE-2015-1628 | Medium | 2015-03-11 | Not applicable | No public exploit | Cross-site scripting (XSS) vulnerability in Outlook Web App (OWA) in Microsoft Exchange Server 2013 SP1 and Cumulative Update 7 allows remote attackers to inject arbitrary web script or HTML via a crafted X-OWA-Canary cookie in an AD.RecipientType.User action, aka "OWA Modified Canary Parameter Cross Site Scripting Vulnerability." |
| CVE-2014-6336 | Low | 2014-12-11 | Not applicable | No public exploit | Outlook Web App (OWA) in Microsoft Exchange Server 2013 SP1 and Cumulative Update 6 does not properly validate redirection tokens, which allows remote attackers to redirect users to arbitrary web sites and spoof the origin of e-mail messages via unspecified vectors, aka "Exchange URL Redirection Vulnerability." |
| CVE-2014-6326 | Medium | 2014-12-11 | Not applicable | No public exploit | Cross-site scripting (XSS) vulnerability in Microsoft Exchange Server 2013 SP1 and Cumulative Update 6 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "OWA XSS Vulnerability," a different vulnerability than CVE-2014-6325. |
| CVE-2014-6325 | Medium | 2014-12-11 | Not applicable | No public exploit | Cross-site scripting (XSS) vulnerability in Microsoft Exchange Server 2013 SP1 and Cumulative Update 6 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "OWA XSS Vulnerability," a different vulnerability than CVE-2014-6326. |
| CVE-2014-6319 | Medium | 2014-12-11 | Not applicable | No public exploit | Outlook Web App (OWA) in Microsoft Exchange Server 2007 SP3, 2010 SP3, and 2013 SP1 and Cumulative Update 6 does not properly validate tokens in requests, which allows remote attackers to spoof the origin of e-mail messages via unspecified vectors, aka "Outlook Web App Token Spoofing Vulnerability." |
| CVE-2013-5072 | Medium | 2013-12-11 | Not applicable | No public exploit | Cross-site scripting (XSS) vulnerability in Outlook Web Access in Microsoft Exchange Server 2010 SP2 and SP3 and 2013 Cumulative Update 2 and 3 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "OWA XSS Vulnerability." |
| CVE-2013-0418 | Medium | 2013-01-17 | Outside Waratek scope | No public exploit | Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.7 and 8.4 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2013-0393. NOTE: the previous information was obtained from the January 2013 CPU. Oracle has not commented on claims from an independent researcher that this is a heap-based buffer overflow in the Paradox database stream filter (vspdx.dll) that can be triggered using a table header with a crafted "number of fields" value. |
| CVE-2012-4791 | Low | 2012-12-12 | Not applicable | No public exploit | Microsoft Exchange Server 2007 SP3 and 2010 SP1 and SP2 allows remote authenticated users to cause a denial of service (Information Store service hang) by subscribing to a crafted RSS feed, aka "RSS Feed May Cause Exchange DoS Vulnerability." |
| CVE-2010-3937 | Medium | 2010-12-16 | Not applicable | No public exploit | Microsoft Exchange Server 2007 SP2 on the x64 platform allows remote authenticated users to cause a denial of service (infinite loop and MSExchangeIS outage) via a crafted RPC request, aka "Exchange Server Infinite Loop Vulnerability." |
| CVE-2010-2091 | Medium | 2010-05-27 | Not applicable | Working exploit published | Microsoft Outlook Web Access (OWA) 8.2.254.0, when Internet Explorer 7 on Windows Server 2003 is used, does not properly handle the id parameter in a Folder IPF.Note action to the default URI, which might allow remote attackers to obtain sensitive information or conduct cross-site scripting (XSS) attacks via an invalid value. |
| CVE-2010-1690 | Medium | 2010-05-07 | Not applicable | No public exploit | The DNS implementation in smtpsvc.dll before 6.0.2600.5949 in Microsoft Windows 2000 SP4 and earlier, Windows XP SP3 and earlier, Windows Server 2003 SP2 and earlier, Windows Server 2008 SP2 and earlier, Windows Server 2008 R2, Exchange Server 2003 SP3 and earlier, Exchange Server 2007 SP2 and earlier, and Exchange Server 2010 does not verify that transaction IDs of responses match transaction IDs of queries, which makes it easier for man-in-the-middle attackers to spoof DNS responses, a different vulnerability than CVE-2010-0024 and CVE-2010-0025. |
| CVE-2010-1689 | Medium | 2010-05-07 | Not applicable | No public exploit | The DNS implementation in smtpsvc.dll before 6.0.2600.5949 in Microsoft Windows 2000 SP4 and earlier, Windows XP SP3 and earlier, Windows Server 2003 SP2 and earlier, Windows Server 2008 SP2 and earlier, Windows Server 2008 R2, Exchange Server 2003 SP3 and earlier, Exchange Server 2007 SP2 and earlier, and Exchange Server 2010 uses predictable transaction IDs that are formed by incrementing a previous ID by 1, which makes it easier for man-in-the-middle attackers to spoof DNS responses, a different vulnerability than CVE-2010-0024 and CVE-2010-0025. |
| CVE-2010-0025 | Medium | 2010-04-14 | Not applicable | No public exploit | The SMTP component in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Server 2008 Gold, SP2, and R2, and Exchange Server 2000 SP3, does not properly allocate memory for SMTP command replies, which allows remote attackers to read fragments of e-mail messages by sending a series of invalid commands and then sending a STARTTLS command, aka "SMTP Memory Allocation Vulnerability." |
| CVE-2010-0024 | Medium | 2010-04-14 | Not applicable | No public exploit | The SMTP component in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Server 2008 Gold, SP2, and R2, and Exchange Server 2003 SP2, does not properly parse MX records, which allows remote DNS servers to cause a denial of service (service outage) via a crafted response to a DNS MX record query, aka "SMTP Server MX Record Vulnerability." |
| CVE-2009-0099 | Medium | 2009-02-10 | Not applicable | Exploited | The Electronic Messaging System Microsoft Data Base (EMSMDB32) provider in Microsoft Exchange 2000 Server SP3 and Exchange Server 2003 SP2, as used in Exchange System Attendant, allows remote attackers to cause a denial of service (application outage) via a malformed MAPI command, aka "Literal Processing Vulnerability." |
| CVE-2009-0098 | High | 2009-02-10 | Not applicable | No public exploit | Microsoft Exchange 2000 Server SP3, Exchange Server 2003 SP2, and Exchange Server 2007 SP1 do not properly interpret Transport Neutral Encapsulation (TNEF) properties, which allows remote attackers to execute arbitrary code via a crafted TNEF message, aka "Memory Corruption Vulnerability." |
| CVE-2008-1547 | Medium | 2008-10-21 | Not applicable | Working exploit published | Open redirect vulnerability in exchweb/bin/redir.asp in Microsoft Outlook Web Access (OWA) for Exchange Server 2003 SP2 (aka build 6.5.7638) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the URL parameter. |
| CVE-2008-2248 | Medium | 2008-07-08 | Not applicable | No public exploit | Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) for Exchange Server 2003 SP2 allows remote attackers to inject arbitrary web script or HTML via unspecified HTML, a different vulnerability than CVE-2008-2247. |
| CVE-2008-2247 | Medium | 2008-07-08 | Not applicable | No public exploit | Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) for Exchange Server 2003 SP2 allows remote attackers to inject arbitrary web script or HTML via unspecified e-mail fields, a different vulnerability than CVE-2008-2248. |
| CVE-2008-1438 | Medium | 2008-05-13 | Not applicable | No public exploit | Unspecified vulnerability in Microsoft Malware Protection Engine (mpengine.dll) 1.1.3520.0 and 0.1.13.192, as used in multiple Microsoft products, allows context-dependent attackers to cause a denial of service (disk space exhaustion) via a file with "crafted data structures" that trigger the creation of large temporary files, a different vulnerability than CVE-2008-1437. |
| CVE-2008-1437 | Medium | 2008-05-13 | Not applicable | No public exploit | Unspecified vulnerability in Microsoft Malware Protection Engine (mpengine.dll) 1.1.3520.0 and 0.1.13.192, as used in multiple Microsoft products, allows context-dependent attackers to cause a denial of service (engine hang and restart) via a crafted file, a different vulnerability than CVE-2008-1438. |
| CVE-2007-2654 | Medium | 2007-05-14 | Not applicable | No public exploit | xfs_fsr in xfsdump creates a .fsr temporary directory with insecure permissions, which allows local users to read or overwrite arbitrary files on xfs filesystems. |
| CVE-2007-0221 | High | 2007-05-08 | Not applicable | No public exploit | Integer overflow in the IMAP (IMAP4) support in Microsoft Exchange Server 2000 SP3 allows remote attackers to cause a denial of service (service hang) via crafted literals in an IMAP command, aka the "IMAP Literal Processing Vulnerability." |
| CVE-2007-0220 | Medium | 2007-05-08 | Not applicable | No public exploit | Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) in Microsoft Exchange Server 2000 SP3, and 2003 SP1 and SP2 allows remote attackers to execute arbitrary scripts, spoof content, or obtain sensitive information via certain UTF-encoded, script-based e-mail attachments, involving an "incorrectly handled UTF character set label". |
| CVE-2007-0213 | High | 2007-05-08 | Not applicable | Working exploit published | Microsoft Exchange Server 2000 SP3, 2003 SP1 and SP2, and 2007 does not properly decode certain MIME encoded e-mails, which allows remote attackers to execute arbitrary code via a crafted base64-encoded MIME e-mail message. |
| CVE-2007-0039 | High | 2007-05-08 | Not applicable | No public exploit | The Exchange Collaboration Data Objects (EXCDO) functionality in Microsoft Exchange Server 2000 SP3, 2003 SP1 and SP2, and 2007 allows remote attackers to cause a denial of service (crash) via an Internet Calendar (iCal) file containing multiple X-MICROSOFT-CDO-MODPROPS (MODPROPS) properties in which the second MODPROPS is longer than the first, which triggers a NULL pointer dereference and an unhandled exception. |
| CVE-2006-1193 | Low | 2006-06-13 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in Microsoft Exchange Server 2000 SP1 through SP3, when running Outlook Web Access (OWA), allows user-assisted remote attackers to inject arbitrary HTML or web script via unknown vectors related to "HTML parsing." |
| CVE-2006-0027 | High | 2006-05-10 | Not applicable | Forecast only | Unspecified vulnerability in Microsoft Exchange allows remote attackers to execute arbitrary code via e-mail messages with crafted (1) vCal or (2) iCal Calendar properties. |
| CVE-2006-0002 | High | 2006-01-10 | Not applicable | No public exploit | Unspecified vulnerability in Microsoft Outlook 2000 through 2003, Exchange 5.0 Server SP2 and 5.5 SP4, Exchange 2000 SP3, and Office allows remote attackers to execute arbitrary code via an e-mail message with a crafted Transport Neutral Encapsulation Format (TNEF) MIME attachment, related to message length validation. |
| CVE-2005-4772 | Medium | 2005-12-31 | Not applicable | No public exploit | liby2util in Yet another Setup Tool (YaST) in SUSE Linux before 20051007 preserves permissions and ownerships when copying a remote repository, which might allow local users to read or modify sensitive files, possibly giving local users the ability to exploit CVE-2005-3013. |
| CVE-2005-1987 | High | 2005-10-13 | Not applicable | No public exploit | Buffer overflow in Collaboration Data Objects (CDO), as used in Microsoft Windows and Microsoft Exchange Server, allows remote attackers to execute arbitrary code when CDOSYS or CDOEX processes an e-mail message with a large header name, as demonstrated using the "Content-Type" string. |
| CVE-2005-0563 | Medium | 2005-06-14 | Not applicable | No public exploit | Cross-site scripting (XSS) vulnerability in Microsoft Outlook Web Access (OWA) component in Exchange Server 5.5 allows remote attackers to inject arbitrary web script or HTML via an email message with an encoded javascript: URL ("javAsc
ript:") in an IMG tag. |
| CVE-2005-0738 | Medium | 2005-05-02 | Not applicable | No public exploit | Stack consumption vulnerability in Microsoft Exchange Server 2003 SP1 allows users to cause a denial of service (hang) by deleting or moving a folder with deeply nested subfolders, which causes Microsoft Exchange Information Store service (Store.exe) to hang as a result of a large number of recursive calls. |
| CVE-2005-0560 | High | 2005-05-02 | Not applicable | Working exploit published | Heap-based buffer overflow in the SvrAppendReceivedChunk function in xlsasink.dll in the SMTP service of Exchange Server 2000 and 2003 allows remote attackers to execute arbitrary code via a crafted X-LINK2STATE extended verb request to the SMTP port. |
| CVE-2005-0044 | High | 2005-05-02 | Not applicable | No public exploit | The OLE component in Windows 98, 2000, XP, and Server 2003, and Exchange Server 5.0 through 2003, does not properly validate the lengths of messages for certain OLE data, which allows remote attackers to execute arbitrary code, aka the "Input Validation Vulnerability." |
| CVE-2005-0420 | Medium | 2005-04-27 | Not applicable | Working exploit published | Microsoft Outlook Web Access (OWA), when used with Exchange, allows remote attackers to redirect users to arbitrary URLs for login via a link to the owalogon.asp application. |
| CVE-2004-0203 | Medium | 2004-11-23 | Not applicable | No public exploit | Cross-site scripting (XSS) vulnerability in Outlook Web Access for Exchange Server 5.5 Service Pack 4 allows remote attackers to insert arbitrary script and spoof content in HTML email or web caches via an HTML redirect query. |
| CVE-2004-0840 | High | 2004-11-03 | Not applicable | No public exploit | The SMTP (Simple Mail Transfer Protocol) component of Microsoft Windows XP 64-bit Edition, Windows Server 2003, Windows Server 2003 64-bit Edition, and the Exchange Routing Engine component of Exchange Server 2003, allows remote attackers to execute arbitrary code via a malicious DNS response message containing length values that are not properly validated. |
| CVE-2004-0574 | High | 2004-11-03 | Not applicable | Working exploit published | The Network News Transfer Protocol (NNTP) component of Microsoft Windows NT Server 4.0, Windows 2000 Server, Windows Server 2003, Exchange 2000 Server, and Exchange Server 2003 allows remote attackers to execute arbitrary code via XPAT patterns, possibly related to improper length validation and an "unchecked buffer," leading to off-by-one and heap-based buffer overflows. |
| CVE-2003-0904 | Medium | 2004-01-20 | Not applicable | No public exploit | Microsoft Exchange 2003 and Outlook Web Access (OWA), when configured to use NTLM authentication, does not properly reuse HTTP connections, which can cause OWA users to view mailboxes of other users when Kerberos has been disabled as an authentication method for IIS 6.0, e.g. when SharePoint Services 2.0 is installed. |
| CVE-2003-1538 | Medium | 2003-12-31 | Not applicable | No public exploit | susehelp in SuSE Linux 8.1, Enterprise Server 8, Office Server, and Openexchange Server 4 does not properly filter shell metacharacters, which allows remote attackers to execute arbitrary commands via CGI queries. |
| CVE-2003-0714 | High | 2003-11-17 | Not applicable | Working exploit published | The Internet Mail Service in Exchange Server 5.5 and Exchange 2000 allows remote attackers to cause a denial of service (memory exhaustion) by directly connecting to the SMTP service and sending a certain extended verb request, possibly triggering a buffer overflow in Exchange 2000. |
| CVE-2003-0712 | Medium | 2003-11-17 | Not applicable | No public exploit | Cross-site scripting (XSS) vulnerability in the HTML encoding for the Compose New Message form in Microsoft Exchange Server 5.5 Outlook Web Access (OWA) allows remote attackers to execute arbitrary web script. |
| CVE-2002-1876 | Low | 2002-12-31 | Not applicable | No public exploit | Microsoft Exchange 2000 allows remote authenticated attackers to cause a denial of service via a large number of rapid requests, which consumes all of the licenses that are granted to Exchange by IIS. |
| CVE-2002-1873 | Medium | 2002-12-31 | Not applicable | No public exploit | Microsoft Exchange 2000, when used with Microsoft Remote Procedure Call (MSRPC), allows remote attackers to cause a denial of service (crash or memory consumption) via malformed MSRPC calls. |
| CVE-2002-1790 | Medium | 2002-12-31 | Not applicable | Working exploit published | The SMTP service in Microsoft Internet Information Services (IIS) 4.0 and 5.0 allows remote attackers to bypass anti-relaying rules and send spam or spoofed messages via encapsulated SMTP addresses, a similar vulnerability to CVE-1999-0682. |
| CVE-2002-0698 | High | 2002-08-12 | Not applicable | No public exploit | Buffer overflow in Internet Mail Connector (IMC) for Microsoft Exchange Server 5.5 allows remote attackers to execute arbitrary code via an EHLO request from a system with a long name as obtained through a reverse DNS lookup, which triggers the overflow in IMC's hello response. |
| CVE-2002-0507 | Low | 2002-08-12 | Not applicable | No public exploit | An interaction between Microsoft Outlook Web Access (OWA) with RSA SecurID allows local users to bypass the SecurID authentication for a previous user via several submissions of an OWA Authentication request with the proper OWA password for the previous user, which is eventually accepted by OWA. |
| CVE-2002-0368 | Medium | 2002-06-18 | Not applicable | No public exploit | The Store Service in Microsoft Exchange 2000 allows remote attackers to cause a denial of service (CPU consumption) via a mail message with a malformed RFC message attribute, aka "Malformed Mail Attribute can Cause Exchange 2000 to Exhaust CPU Resources." |
| CVE-2002-0055 | Medium | 2002-03-08 | Not applicable | No public exploit | SMTP service in Microsoft Windows 2000, Windows XP Professional, and Exchange 2000 allows remote attackers to cause a denial of service via a command with a malformed data transfer (BDAT) request. |
| CVE-2002-0054 | High | 2002-03-08 | Not applicable | No public exploit | SMTP service in (1) Microsoft Windows 2000 and (2) Internet Mail Connector (IMC) in Exchange Server 5.5 does not properly handle responses to NTLM authentication, which allows remote attackers to perform mail relaying via an SMTP AUTH command using null session credentials. |
| CVE-2002-0049 | Medium | 2002-03-08 | Not applicable | No public exploit | Microsoft Exchange Server 2000 System Attendant gives "Everyone" group privileges to the WinReg key, which could allow remote attackers to read or modify registry keys. |
| CVE-2001-0726 | High | 2001-12-06 | Not applicable | No public exploit | Outlook Web Access (OWA) in Microsoft Exchange 5.5 Server, when used with Internet Explorer, does not properly detect certain inline script, which can allow remote attackers to perform arbitrary actions on a user's Exchange mailbox via an HTML e-mail message. |
| CVE-2001-0666 | Low | 2001-10-30 | Not applicable | No public exploit | Outlook Web Access (OWA) in Microsoft Exchange 2000 allows an authenticated user to cause a denial of service (CPU consumption) via a malformed OWA request for a deeply nested folder within the user's mailbox. |
| CVE-2001-0660 | Medium | 2001-10-30 | Not applicable | No public exploit | Outlook Web Access (OWA) in Microsoft Exchange 5.5, SP4 and earlier, allows remote attackers to identify valid user email addresses by directly accessing a back-end function that processes the global address list (GAL). |
| CVE-2001-0543 | Medium | 2001-09-20 | Not applicable | No public exploit | Memory leak in NNTP service in Windows NT 4.0 and Windows 2000 allows remote attackers to cause a denial of service (memory exhaustion) via a large number of malformed posts. |
| CVE-2001-0509 | Medium | 2001-09-20 | Not applicable | No public exploit | Vulnerabilities in RPC servers in (1) Microsoft Exchange Server 2000 and earlier, (2) Microsoft SQL Server 2000 and earlier, (3) Windows NT 4.0, and (4) Windows 2000 allow remote attackers to cause a denial of service via malformed inputs. |
| CVE-2001-0340 | High | 2001-07-21 | Not applicable | No public exploit | An interaction between the Outlook Web Access (OWA) service in Microsoft Exchange 2000 Server and Internet Explorer allows attackers to execute malicious script code against a user's mailbox via a message attachment that contains HTML code, which is executed automatically. |
| CVE-2001-1319 | Medium | 2001-07-16 | Not applicable | No public exploit | Microsoft Exchange 5.5 2000 allows remote attackers to cause a denial of service (hang) via exceptional BER encodings for the LDAP filter type field, as demonstrated by the PROTOS LDAPv3 test suite. |
| CVE-2001-0146 | Medium | 2001-06-02 | Not applicable | No public exploit | IIS 5.0 and Microsoft Exchange 2000 allow remote attackers to cause a denial of service (memory allocation error) by repeatedly sending a series of specially formatted URL's. |
| CVE-1999-0945 | Medium | 2001-03-12 | Not applicable | No public exploit | Buffer overflow in Internet Mail Service (IMS) for Microsoft Exchange 5.5 and 5.0 allows remote attackers to conduct a denial of service via AUTH or AUTHINFO commands. |
| CVE-2000-1139 | High | 2001-01-09 | Not applicable | No public exploit | The installation of Microsoft Exchange 2000 before Rev. A creates a user account with a known password, which could allow attackers to gain privileges, aka the "Exchange User Account" vulnerability. |
| CVE-2000-1006 | Medium | 2000-12-11 | Not applicable | No public exploit | Microsoft Exchange Server 5.5 does not properly handle a MIME header with a blank charset specified, which allows remote attackers to cause a denial of service via a charset="" command, aka the "Malformed MIME Header" vulnerability. |
| CVE-2000-0524 | Medium | 2000-06-05 | Not applicable | No public exploit | Microsoft Outlook and Outlook Express allow remote attackers to cause a denial of service by sending email messages with blank fields such as BCC, Reply-To, Return-Path, or From. |
| CVE-2000-0216 | Medium | 2000-02-29 | Not applicable | No public exploit | Microsoft email clients in Outlook, Exchange, and Windows Messaging automatically respond to Read Receipt and Delivery Receipt tags, which could allow an attacker to flood a mail system with responses by forging a Read Receipt request that is redirected to a large distribution list. |
| CVE-1999-1043 | Medium | 1999-12-31 | Not applicable | No public exploit | Microsoft Exchange Server 5.5 and 5.0 does not properly handle (1) malformed NNTP data, or (2) malformed SMTP data, which allows remote attackers to cause a denial of service (application error). |
| CVE-1999-0993 | High | 1999-12-13 | Not applicable | No public exploit | Modifications to ACLs (Access Control Lists) in Microsoft Exchange 5.5 do not take effect until the directory store cache is refreshed. |
| CVE-1999-0682 | Medium | 1999-08-06 | Not applicable | No public exploit | Microsoft Exchange 5.5 allows a remote attacker to relay email (i.e. spam) using encapsulated SMTP addresses, even if the anti-relaying features are enabled. |
| CVE-1999-0385 | High | 1998-12-01 | Not applicable | No public exploit | The LDAP bind function in Exchange 5.5 has a buffer overflow that allows a remote attacker to conduct a denial of service or execute commands. |
| CVE-1999-1322 | Medium | 1998-11-12 | Not applicable | No public exploit | The installation of 1ArcServe Backup and Inoculan AV client modules for Exchange create a log file, exchverify.log, which contains usernames and passwords in plaintext. |
| CVE-1999-0007 | Medium | 1998-06-26 | Not applicable | No public exploit | Information from SSL-encrypted sessions via PKCS #1. |
| CVE-1999-0284 | High | 1998-01-01 | Not applicable | Working exploit published | Denial of service to NT mail servers including Ipswitch, Mdaemon, and Exchange through a buffer overflow in the SMTP HELO command. |