CVE-2023-38182

HighCVSS 8.0/10Last modified Aug 10, 2026

Description

Microsoft Exchange Server Remote Code Execution Vulnerability

Metrics

CVSS 3.1 8.0/10CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-502

Affected software

VendorProductVersions
MicrosoftMicrosoft Exchange Server 2016 Cumulative Update 23>= 15.01.0, < 15.01.2507.032
MicrosoftMicrosoft Exchange Server 2019 Cumulative Update 12>= 15.02.0, < 15.02.1118.037
MicrosoftMicrosoft Exchange Server 2019 Cumulative Update 13>= 15.02.0, < 15.02.1258.025

References

Timeline

Published
Aug 8, 2023
Last modified
Aug 10, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-381847.5Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution VulnerabilityCVE-2023-381858.8Microsoft Exchange Server Remote Code Execution VulnerabilityCVE-2023-381869.8Windows Mobile Device Management Elevation of Privilege VulnerabilityCVE-2023-381876.5Microsoft Edge (Chromium-based) Elevation of Privilege VulnerabilityCVE-2023-381884.5Azure Apache Hadoop Spoofing VulnerabilityCVE-2023-38196.5Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository pimcore/pimcore prior to 10.6.4.CVE-2023-381908.8An issue was discovered in SuperWebMailer 9.00.0.01710. It allows Export SQL Injection via the size parameter.CVE-2023-381916.1An issue was discovered in SuperWebMailer 9.00.0.01710. It allows spamtest_external.php XSS via a crafted filename.CVE-2023-381926.1An issue was discovered in SuperWebMailer 9.00.0.01710. It allows superadmincreate.php XSS via crafted incorrect passwords.CVE-2023-381938.8An issue was discovered in SuperWebMailer 9.00.0.01710. It allows Remote Code Execution via a crafted sendmail command line.CVE-2023-381946.1An issue was discovered in SuperWebMailer 9.00.0.01710. It allows keepalive.php XSS via a GET parameter.CVE-2023-381954.9Datalust Seq before 2023.2.9489 allows insertion of sensitive information into an externally accessible file or directory. This is exploitab
CVE-2023-38182: High severity, CVSS 8.0 | Vulnix