CVE-2023-36745: Microsoft Exchange Server Remote Code Execution Vulnerability
First published: Tue Sep 12 2023(Updated: )
Microsoft Exchange Server Remote Code Execution Vulnerability
Credit: secure@microsoft.com secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Exchange Server 2019 | =13 | |
| Microsoft Exchange Server 2016 | =23 | |
| Microsoft Exchange Server 2019 | =12 | |
| Microsoft Exchange Server | =2016-cumulative_update_23 | |
| Microsoft Exchange Server | =2019-cumulative_update_12 | |
| Microsoft Exchange Server | =2019-cumulative_update_13 | |
| Microsoft Exchange Server 2019 | =13 | |
| Microsoft Exchange Server 2016 | =23 | |
| Microsoft Exchange Server 2019 | =12 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2023-36745?
CVE-2023-36745 is a Microsoft Exchange Server Remote Code Execution Vulnerability.
How can this vulnerability affect me?
This vulnerability can allow an attacker to execute arbitrary code on a vulnerable Microsoft Exchange Server.
What is the severity of CVE-2023-36745?
CVE-2023-36745 has a severity rating of high.
Which versions of Microsoft Exchange Server are affected by this vulnerability?
Microsoft Exchange Server 2019 (version 13) and Microsoft Exchange Server 2016 (version 23) are affected by this vulnerability.
How can I fix CVE-2023-36745?
To fix CVE-2023-36745, you should install the relevant security patch provided by Microsoft for your version of Microsoft Exchange Server. Please refer to the official Microsoft support pages for download links and instructions.
- collector/msrc
- agent/author
- agent/type
- agent/first-publish-date
- source/Microsoft
- collector/msrc-cve
- agent/remedy
- agent/title
- agent/severity
- agent/references
- agent/description
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/mitre-cve
- source/MITRE
- agent/event
- agent/software-canonical-lookup
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- agent/weakness
- agent/last-modified-date
- agent/tags
- vendor/microsoft
- canonical/microsoft exchange server 2019
- version/microsoft exchange server 2019/13
- canonical/microsoft exchange server 2016
- version/microsoft exchange server 2016/23
- version/microsoft exchange server 2019/12
- canonical/microsoft exchange server
- version/microsoft exchange server/2016-cumulative_update_23
- version/microsoft exchange server/2019-cumulative_update_12
- version/microsoft exchange server/2019-cumulative_update_13