Vulnerability intelligence
VULONE Vulnerability Database
Stay ahead of what gets exploited. Every CVE from NVD, enriched every 30 minutes with EPSS, CISA KEV, ransomware linkage and automated analysis.
404,508CVE records
3,252Published, last 7 days
1,739In CISA KEV
1,424Critical, last 30 days
5,599Analysed
13:17 UTCLast NVD sync
Filters Show:
39 results. Microsoft Exchange Server Subscription Edition.
Page 2 of 2| ID | Severity | Score | Technology | Weakness | CISA KEV | Exploit | EPSS | Published |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-47631 | Medium | 5.4 |  Microsoft Exchange Server +1 | Cross-site scripting | - | - | 0.47% | Jun 9, 2026 |
| CVE-2026-45583 | High | 8.1 | Microsoft Exchange Server +1 | Code injection | - | - | 0.70% | Jun 9, 2026 |
| CVE-2026-45504 | High | 8.8 | Microsoft Exchange Server +1 | Server-side request forgery (SSRF) | - | - | 0.78% | Jun 9, 2026 |
| CVE-2026-45503 | Medium | 6.5 | Microsoft Exchange Server +1 | Improper authorization | - | - | 0.86% | Jun 9, 2026 |
| CVE-2026-45502 | Medium | 5.0 | Microsoft Exchange Server +1 | Server-side request forgery (SSRF) | - | - | 0.64% | Jun 9, 2026 |
| CVE-2026-45501 | Medium | 6.1 | Microsoft Exchange Server +1 | Server-side request forgery (SSRF) | - | - | 0.46% | Jun 9, 2026 |
| CVE-2026-45500 | Medium | 6.1 | Microsoft Exchange Server +1 | Cross-site scripting | - | - | 0.41% | Jun 9, 2026 |
| CVE-2026-42897 | Medium | 6.1 | Microsoft Exchange Server +1 | Cross-site scripting | Listed | Confirmed | 0.52% | May 14, 2026 |
| CVE-2026-21527 | Medium | 6.5 | Microsoft Exchange Server +1 | Insufficient verification of data | - | - | 8.3% | Feb 10, 2026 |
| CVE-2025-64667 | Medium | 5.3 | Microsoft Exchange Server +1 | CWE-451 | - | - | 0.80% | Dec 9, 2025 |
| CVE-2025-64666 | High | 7.5 | Microsoft Exchange Server +1 | Improper input validation | - | - | 1.0% | Dec 9, 2025 |
| CVE-2025-59249 | High | 8.8 | Microsoft Exchange Server +1 | CWE-1390 | - | - | 0.83% | Oct 14, 2025 |
| CVE-2025-59248 | High | 7.5 | Microsoft Exchange Server +1 | Improper input validation | - | - | 1.0% | Oct 14, 2025 |
| CVE-2025-53782 | High | 7.8 | Microsoft Exchange Server +1 | CWE-303 | - | - | 0.36% | Oct 14, 2025 |
| CVE-2025-33051 | High | 7.5 | Microsoft Exchange Server +1 | Information exposure | - | - | 1.3% | Aug 12, 2025 |
| CVE-2025-25007 | Medium | 5.3 | Microsoft Exchange Server +1 | CWE-1286 | - | - | 0.87% | Aug 12, 2025 |
| CVE-2025-25006 | Medium | 5.3 | Microsoft Exchange Server +1 | CWE-167 | - | - | 0.89% | Aug 12, 2025 |
| CVE-2025-25005 | Medium | 6.5 | Microsoft Exchange Server +1 | Improper input validation | - | - | 1.4% | Aug 12, 2025 |
| CVE-2025-53786 | High | 8.0 | Microsoft Exchange Server +1 | Improper authentication | - | - | 7.7% | Aug 6, 2025 |
