Multiple vulnerabilities in Microsoft Server Software

Description

Multiple vulnerabilities were found in Microsoft Server Software. Malicious users can exploit these vulnerabilities to obtain sensitive information, gain privileges.

Below is a complete list of vulnerabilities:

1. An information disclosure vulnerability in Microsoft Exchange can be exploited remotely to obtain sensitive information.
2. An elevation of privilege vulnerability in Microsoft Exchange Server can be exploited remotely to gain privileges.

Fiches de renseignement originales

• CVE-2022-30134

• CVE-2022-24516
• CVE-2022-21979
• CVE-2022-34692
• CVE-2022-21980
• CVE-2022-24477

Exploitation

Public exploits exist for this vulnerability.

Produits associés

• Microsoft-Exchange-Server

Liste CVE

• CVE-2022-30134
  high
• CVE-2022-24516
  critical
• CVE-2022-21979
  high
• CVE-2022-34692
  high
• CVE-2022-21980
  critical
• CVE-2022-24477
  critical

Liste KB

• 5015322
• 5019076
• 5019077

En savoir plus

Découvrez les statistiques de la propagation des vulnérabilités dans votre région statistics.securelist.com