CVE-2023-36035: Microsoft Exchange Server Spoofing Vulnerability
First published: Tue Nov 14 2023(Updated: )
Microsoft Exchange Server Spoofing Vulnerability
Credit: secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Exchange Server 2016 | =23 | |
| Microsoft Exchange Server 2019 | =12 | |
| Microsoft Exchange Server 2019 | =13 | |
| Microsoft Exchange Server | =2016-cumulative_update_23 | |
| Microsoft Exchange Server | =2019-cumulative_update_12 | |
| Microsoft Exchange Server | =2019-cumulative_update_13 | |
| Microsoft Exchange Server 2019 | =12 | |
| Microsoft Exchange Server 2019 | =13 | |
| Microsoft Exchange Server 2016 | =23 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2023-36035?
CVE-2023-36035 is a Spoofing Vulnerability in Microsoft Exchange Server.
What is the severity of CVE-2023-36035?
CVE-2023-36035 has a high severity rating of 8 out of 10.
Which versions of Microsoft Exchange Server are affected by CVE-2023-36035?
Microsoft Exchange Server 2019 (versions 13 and 12) and Exchange Server 2016 (version 23) are affected by CVE-2023-36035.
How can I fix CVE-2023-36035?
You can fix CVE-2023-36035 by applying the patches provided by Microsoft. Please refer to the Microsoft support page for more information and download the appropriate patch for your version of Exchange Server.
Where can I find more information about CVE-2023-36035?
You can find more information about CVE-2023-36035 on the Microsoft Security Response Center (MSRC) website.
- collector/msrc
- source/Microsoft
- collector/msrc-cve
- agent/first-publish-date
- agent/type
- agent/software-canonical-lookup
- agent/references
- agent/severity
- agent/author
- agent/title
- agent/remedy
- agent/softwarecombine
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/event
- collector/nvd-api
- source/NVD
- agent/last-modified-date
- agent/weakness
- agent/tags
- vendor/microsoft
- canonical/microsoft exchange server 2016
- version/microsoft exchange server 2016/23
- canonical/microsoft exchange server 2019
- version/microsoft exchange server 2019/12
- version/microsoft exchange server 2019/13
- canonical/microsoft exchange server
- version/microsoft exchange server/2016-cumulative_update_23
- version/microsoft exchange server/2019-cumulative_update_12
- version/microsoft exchange server/2019-cumulative_update_13