Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Microsoft | Microsoft Exchange Server 2013 Cumulative Update 23 | affected |
|
||||||
| Microsoft | Microsoft Exchange Server 2016 Cumulative Update 23 | affected |
|
||||||
| Microsoft | Microsoft Exchange Server 2019 Cumulative Update 11 | affected |
|
||||||
| Microsoft | Microsoft Exchange Server 2019 Cumulative Update 12 | affected |
|
Configuration 1 [-]
|
No data.
No data available yet.
No solution or workaround provided in the CVE record.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2023-25873 | Microsoft Exchange Server Remote Code Execution Vulnerability |
Wed, 25 Feb 2026 16:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:2.3:a:microsoft:exchange_server:*:cumulative_update_11:*:*:*:*:*:* cpe:2.3:a:microsoft:exchange_server:*:cumulative_update_12:*:*:*:*:*:* cpe:2.3:a:microsoft:exchange_server:*:cumulative_update_23:*:*:*:*:*:* |
MITRE
Status: PUBLISHED
Assigner: microsoft
Published:
Updated: 2026-08-19T16:26:36.721Z
Reserved: 2022-12-13T18:08:03.490Z
Link: CVE-2023-21706
Vulnrichment
No data.
NVD
Status : Modified
Published: 2023-02-14T20:15:13.900
Modified: 2026-08-19T17:18:11.530
Link: CVE-2023-21706
Redhat
No data.
OpenCVE Enrichment
No data.
-
CWE-502
Deserialization of Untrusted Data
- NVD-CWE-noinfo