CVE-2023-36745: Microsoft Exchange Server Remote Code Execution Vulnerability
Published Sep 12, 2023
·Updated
Microsoft Exchange Server Remote Code Execution Vulnerability
Affected Software
9 affected componentsFixes available
Microsoft Exchange Server 2016=23
Microsoft Exchange Server 2016=23
Microsoft Exchange Server 2019=13
Microsoft Exchange Server 2019=12
Microsoft Exchange Server 2019=13
Microsoft Exchange Server 2019=12
Microsoft Exchange Server=2016-cumulative_update_23
Microsoft Exchange Server=2019-cumulative_update_12
Microsoft Exchange Server=2019-cumulative_update_13
Remediation
Event History
Sep 12, 2023
CVE Published
07:00 AM
Data Sourced
via Microsoft·07:00 AM
DescriptionSeverityWeakness
CVE Published
via MITRE·04:58 PM
Data Sourced
via MITRE·04:58 PM
DescriptionSeverity
Frequently Asked Questions
1
What is CVE-2023-36745?
CVE-2023-36745 is a Microsoft Exchange Server Remote Code Execution Vulnerability.
2
How can this vulnerability affect me?
This vulnerability can allow an attacker to execute arbitrary code on a vulnerable Microsoft Exchange Server.
3
What is the severity of CVE-2023-36745?
CVE-2023-36745 has a severity rating of high.
4
Which versions of Microsoft Exchange Server are affected by this vulnerability?
Microsoft Exchange Server 2019 (version 13) and Microsoft Exchange Server 2016 (version 23) are affected by this vulnerability.
5
How can I fix CVE-2023-36745?
To fix CVE-2023-36745, you should install the relevant security patch provided by Microsoft for your version of Microsoft Exchange Server. Please refer to the official Microsoft support pages for download links and instructions.