Filtered by vendor Microsoft Subscriptions
Filtered by product Exchange Server Subscription Edition Subscriptions
Total 42 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-45500 1 Microsoft 9 Exchange Server, Exchange Server 2016, Exchange Server 2019 and 6 more 2026-06-10 6.1 Medium
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-45583 1 Microsoft 5 Exchange Server, Exchange Server 2016, Exchange Server 2019 and 2 more 2026-06-10 7.5 High
Improper control of generation of code ('code injection') in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.