CVSS: 8.1EPSS: 2%CPEs: 4EXPL: 2CVE-2018-8581 – Microsoft Exchange Server Privilege Escalation Vulnerability
https://notcve.org/view.php?id=CVE-2018-8581
An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka "Microsoft Exchange Server Elevation of Privilege Vulnerability." This affects Microsoft Exchange Server. Existe una vulnerabilidad de elevación de privilegios en Microsoft Exchange Server. Esto también se conoce como "Microsoft Exchange Server Elevation of Privilege Vulnerability". Esto afecta a Microsoft Exchange Server. • https://github.com/WyAtu/CVE-2018-8581 https://github.com/qiantu88/CVE-2018-8581 http://www.securityfocus.com/bid/105837 http://www.securitytracker.com/id/1042141 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8581 •
CVSS: 8.6EPSS: 0%CPEs: 18EXPL: 3CVE-2018-16793
https://notcve.org/view.php?id=CVE-2018-16793
Rollup 18 for Microsoft Exchange Server 2010 SP3 and previous versions has an SSRF vulnerability via the username parameter in /owa/auth/logon.aspx in the OWA (Outlook Web Access) login page. Rollup 18 para Microsoft Exchange Server 2010 SP3 y versiones anteriores tiene una vulnerabilidad Server-Side Request Forgery (SSRF) mediante el parámetro username en /owa/auth/logon.aspx la página de inicio de sesión de OWA (Outlook Web Access). • http://packetstormsecurity.com/files/149411/Rollup-18-For-Microsoft-Exchange-Server-2010-SP3-Server-Side-Request-Forgery.html http://seclists.org/fulldisclosure/2018/Sep/20 http://www.securityfocus.com/bid/105386 https://seclists.org/bugtraq/2018/Sep/38 • CWE-918: Server-Side Request Forgery (SSRF) •
CVSS: 10.0EPSS: 54%CPEs: 5EXPL: 0CVE-2018-8302 – Microsoft Exchange Server Voicemail Transcription Improper Access Control Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2018-8302
A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka "Microsoft Exchange Memory Corruption Vulnerability." This affects Microsoft Exchange Server. Existe una vulnerabilidad de ejecución remota de código en el software de Microsoft Exchange cuando no gestiona correctamente objetos en la memoria. Esto también se conoce como "Microsoft Exchange Memory Corruption Vulnerability". Esto afecta a Microsoft Exchange Server. • http://www.securityfocus.com/bid/104973 http://www.securitytracker.com/id/1041468 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8302 • CWE-787: Out-of-bounds Write •
CVSS: 4.3EPSS: 1%CPEs: 6EXPL: 0CVE-2018-8151
https://notcve.org/view.php?id=CVE-2018-8151
An information disclosure vulnerability exists when Microsoft Exchange improperly handles objects in memory, aka "Microsoft Exchange Memory Corruption Vulnerability." This affects Microsoft Exchange Server. This CVE ID is unique from CVE-2018-8154. Existe una vulnerabilidad de divulgación de información cuando Microsoft Exchange gestiona incorrectamente los objetos en la memoria. Esto también se conoce como "Microsoft Exchange Memory Corruption Vulnerability". • http://www.securityfocus.com/bid/104042 http://www.securitytracker.com/id/1040850 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8151 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 10.0EPSS: 10%CPEs: 6EXPL: 0CVE-2018-8154
https://notcve.org/view.php?id=CVE-2018-8154
A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka "Microsoft Exchange Memory Corruption Vulnerability." This affects Microsoft Exchange Server. This CVE ID is unique from CVE-2018-8151. Existe una vulnerabilidad de ejecución remota de código en el software de Microsoft Exchange cuando no gestiona correctamente objetos en la memoria. Esto también se conoce como "Microsoft Exchange Memory Corruption Vulnerability". • http://www.securityfocus.com/bid/104054 http://www.securitytracker.com/id/1040850 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8154 • CWE-787: Out-of-bounds Write •