Description
Microsoft Exchange Server contains an information disclosure vulnerability which can allow an unauthenticated attacker to steal email traffic from target.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| Microsoft Exchange Server 2013 Cumulative Update 23 | Microsoft / Microsoft Exchange Server 2013 Cumulative Update 23 | >= 15.00.0, < 15.00.1497.015 | affected |
| Microsoft Exchange Server 2016 Cumulative Update 19 | Microsoft / Microsoft Exchange Server 2016 Cumulative Update 19 | >= 15.01.0, < 15.01.2176.012 | affected |
| Microsoft Exchange Server 2016 Cumulative Update 20 | Microsoft / Microsoft Exchange Server 2016 Cumulative Update 20 | >= 15.01.0, < 15.01.2242.008 | affected |
| Microsoft Exchange Server 2019 Cumulative Update 8 | Microsoft / Microsoft Exchange Server 2019 Cumulative Update 8 | >= 15.02.0, < 15.02.0792.013 | affected |
| Microsoft Exchange Server 2019 Cumulative Update 9 | Microsoft / Microsoft Exchange Server 2019 Cumulative Update 9 | >= 15.02.0, < 15.02.0858.010 | affected |