KLA20155
Multiple vulnerabilities in Microsoft Exchange Server

Updated: 09/29/2023

Detect date ?	01/10/2023
Severity ?	High
Description	Multiple vulnerabilities were found in Microsoft Exchange Server. Malicious users can exploit these vulnerabilities to spoof user interface, gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: A spoofing vulnerability in Microsoft Exchange Server can be exploited remotely to spoof user interface. An elevation of privilege vulnerability in Microsoft Exchange Server can be exploited remotely to gain privileges. An information disclosure vulnerability in Microsoft Exchange Server can be exploited remotely to obtain sensitive information.
Affected products	Microsoft Exchange Server 2016 Cumulative Update 23 Microsoft Exchange Server 2019 Cumulative Update 12 Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2019 Cumulative Update 11
Solution	Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)
Original advisories	CVE-2023-21762 CVE-2023-21763 CVE-2023-21761 CVE-2023-21764 CVE-2023-21745
Impacts ?	OSI [?] PE [?] SUI [?]
Related products	Microsoft Exchange Server
CVE-IDS ?	CVE-2023-217625.0Warning CVE-2023-217635.0Warning CVE-2023-217615.0Warning CVE-2023-217645.0Warning CVE-2023-217455.0Warning
KB list	5022188 5022143 5022193
Microsoft official advisories	Microsoft Security Update Guide
	Find out the statistics of the vulnerabilities spreading in your region

KLA20155Multiple vulnerabilities in Microsoft Exchange Server