Microsoft update

KB5022143

Security Update

Fixed in

TI-2023-08144 CVE-2023-21762 · GHSA-r79h-xwx8-4h7h

MEDIUM 40

Microsoft Exchange Server Spoofing Vulnerability

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.01592 Published 2023-01-10 Fixed in 15.01.2507.017, 15.02.1118.021 +2 CWE-502

TI-2023-08127 CVE-2023-21745 · GHSA-x5p9-xxf9-9475

MEDIUM 40

Microsoft Exchange Server Spoofing Vulnerability

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.01538 Published 2023-01-10 Fixed in 15.01.2507.017, 15.02.1118.021 +1 CWE-502

TI-2023-08143 CVE-2023-21761 · GHSA-4374-5gxx-h9r3

LOW 36

Microsoft Exchange Server Information Disclosure Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01638 Published 2023-01-10 Fixed in 15.01.2507.017, 15.02.0986.037 +1 CWE-918

TI-2023-08146 CVE-2023-21764 · GHSA-282j-9h8p-xf7h

LOW 35

Microsoft Exchange Server Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00584 Published 2023-01-10 Fixed in 15.02.0986.037, 15.02.1118.021 +1 CWE-426

TI-2023-08145 CVE-2023-21763 · GHSA-h4qf-hgrc-jqm7

LOW 35

Microsoft Exchange Server Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00615 Published 2023-01-10 Fixed in 15.02.0986.037, 15.02.1118.021 +1 CWE-426