Microsoft Microsoft Exchange Server 2013

Name: Microsoft Microsoft Exchange Server 2013
Brand: Microsoft

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

1critical5high4medium0low

updated 2026-10-27

vulnerabilities (10)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-0688US	high8.8OT critical	100.0% (100th)	KEV	no fix	2020-02-11	≤ Cumulative Update 23
CVE-2019-0724US	high8.1	23.8% (98th)	Exploit	no fix	2019-03-05	≤ Cumulative Update 22
CVE-2019-1373US	critical9.8	21.7% (98th)	—	no fix	2019-11-12	≤ Cumulative Update 23
CVE-2019-1084US	medium6.5	5.33% (93rd)	—	no fix	2019-07-15	≤ Cumulative Update 23
CVE-2019-0686US	high7.4	5.03% (92nd)	—	no fix	2019-03-05	≤ Cumulative Update 22
CVE-2019-1136US	high8.1	3.38% (89th)	—	no fix	2019-07-15	≤ Cumulative Update 23
CVE-2020-0692US	high8.1	3.26% (88th)	—	no fix	2020-02-11	≤ Cumulative Update 23
CVE-2019-0817US	medium5.4	2.29% (83rd)	—	no fix	2019-04-09	≤ Cumulative Update 22
CVE-2019-0858US	medium6.1	2.10% (82nd)	—	no fix	2019-04-09	≤ Cumulative Update 22
CVE-2019-1137US	medium5.4	1.58% (75th)	—	no fix	2019-07-15	≤ Cumulative Update 23

The flaw types (CWEs) most of these CVEs share.

CWE-269Improper Privilege Management2 CVEs
CWE-284Improper Access Control2 CVEs
CWE-502Deserialization of Untrusted Data2 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2 CVEs
CWE-19CWE-191 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-264CWE-2641 CVEs
CWE-287Improper Authentication1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.