CVE-2023-21745

HighCVSS 8.0/10Last modified Jun 17, 2026

Description

Microsoft Exchange Server Spoofing Vulnerability

Metrics

CVSS 3.1 8.0/10CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-502

Affected software

VendorProductVersions
MicrosoftMicrosoft Exchange Server 2016 Cumulative Update 23>= 15.01.0, < 15.01.2507.017
MicrosoftMicrosoft Exchange Server 2019 Cumulative Update 12>= 15.02.0, < 15.02.1118.021
MicrosoftMicrosoft Exchange Server 2019 Cumulative Update 11>= 15.02.0, < 15.02.0986.037

References

Timeline

Published
Jan 10, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-217467.8Windows NTLM Elevation of Privilege VulnerabilityCVE-2023-217477.8Windows Kernel Elevation of Privilege VulnerabilityCVE-2023-217487.8Windows Kernel Elevation of Privilege VulnerabilityCVE-2023-217497.8Windows Kernel Elevation of Privilege VulnerabilityCVE-2023-217507.1Windows Kernel Elevation of Privilege VulnerabilityCVE-2023-217516.5Azure DevOps Server Spoofing VulnerabilityCVE-2023-217527.1Windows Backup Service Elevation of Privilege VulnerabilityCVE-2023-217535.5Event Tracing for Windows Information Disclosure VulnerabilityCVE-2023-217547.8Windows Kernel Elevation of Privilege VulnerabilityCVE-2023-217557.8Windows Kernel Elevation of Privilege VulnerabilityCVE-2023-217567.8Windows Win32k Elevation of Privilege VulnerabilityCVE-2023-217577.5Windows Layer 2 Tunneling Protocol (L2TP) Denial of Service Vulnerability
CVE-2023-21745: High severity, CVSS 8.0 | Vulnix