CVE-2022-34692

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

Microsoft Exchange Server Information Disclosure Vulnerability

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-200

Affected software

VendorProductVersions
MicrosoftMicrosoft Exchange Server 2016 Cumulative Update 23>= 15.01.0, < 15.01.2507.012
MicrosoftMicrosoft Exchange Server 2019 Cumulative Update 12>= 15.02.0, < 15.02.1118.012
MicrosoftMicrosoft Exchange Server 2019 Cumulative Update 11>= 15.02.0, < 15.02.0986.029
MicrosoftMicrosoft Exchange Server 2016 Cumulative Update 22>= 15.0.0, < 15.01.2375.031

References

Timeline

Published
Aug 9, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-346967.8Windows Hyper-V Remote Code Execution VulnerabilityCVE-2022-346997.8Windows Win32k Elevation of Privilege VulnerabilityCVE-2022-34706.5A vulnerability was found in SourceCodester Human Resource Management System. It has been classified as critical. Affected is an unknown funCVE-2022-347008.8Microsoft Dynamics CRM (on-premises) Remote Code Execution VulnerabilityCVE-2022-347017.5Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service VulnerabilityCVE-2022-347028.1Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution VulnerabilityCVE-2022-347037.8Windows Partition Management Driver Elevation of Privilege VulnerabilityCVE-2022-347044.7Windows Defender Credential Guard Information Disclosure VulnerabilityCVE-2022-347057.8Windows Defender Credential Guard Elevation of Privilege VulnerabilityCVE-2022-347067.8Windows Local Security Authority (LSA) Elevation of Privilege VulnerabilityCVE-2022-347077.8Windows Kernel Elevation of Privilege VulnerabilityCVE-2022-347085.5Windows Kernel Information Disclosure Vulnerability
CVE-2022-34692: Medium severity, CVSS 5.3 | Vulnix