KLA20042
Multiple vulnerabilities in Microsoft Exchange Server

Updated: 09/28/2023

Detect date ?	11/08/2022
Severity ?	Critical
Description	Multiple vulnerabilities were found in Microsoft Exchange Server. Malicious users can exploit these vulnerabilities to spoof user interface, gain privileges. Below is a complete list of vulnerabilities: A spoofing vulnerability in Microsoft Exchange Server can be exploited remotely to spoof user interface. An elevation of privilege vulnerability in Microsoft Exchange Server can be exploited remotely to gain privileges.
Exploitation	Public exploits exist for this vulnerability.
Affected products	Microsoft Exchange Server 2019 Cumulative Update 11 Microsoft Exchange Server 2019 Cumulative Update 12 Microsoft Exchange Server 2016 Cumulative Update 22 Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2016 Cumulative Update 23
Solution	Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)
Original advisories	CVE-2022-41078 CVE-2022-41079 CVE-2022-41080 CVE-2022-41123
Impacts ?	PE [?] SUI [?]
Related products	Microsoft Exchange Server
CVE-IDS ?	CVE-2022-410785.0Warning CVE-2022-410795.0Warning CVE-2022-410805.0Warning CVE-2022-411235.0Warning
KB list	5019758
Microsoft official advisories	Microsoft Security Update Guide
	Find out the statistics of the vulnerabilities spreading in your region

KLA20042Multiple vulnerabilities in Microsoft Exchange Server