CVE-2023-36757: Microsoft Exchange Server Spoofing Vulnerability
Published Sep 12, 2023
·Updated
Microsoft Exchange Server Spoofing Vulnerability
Affected Software
9 affected componentsFixes available
Microsoft Exchange Server 2016=23
Microsoft Exchange Server 2016=23
Microsoft Exchange Server 2019=12
Microsoft Exchange Server 2019=12
Microsoft Exchange Server 2019=13
Microsoft Exchange Server 2019=13
Microsoft Exchange Server=2016-cumulative_update_23
Microsoft Exchange Server=2019-cumulative_update_12
Microsoft Exchange Server=2019-cumulative_update_13
Remediation
Event History
Sep 12, 2023
CVE Published
07:00 AM
Data Sourced
via Microsoft·07:00 AM
DescriptionSeverityWeakness
CVE Published
via MITRE·04:58 PM
Data Sourced
via MITRE·04:58 PM
DescriptionSeverity
Frequently Asked Questions
1
What is CVE-2023-36757?
CVE-2023-36757 is a spoofing vulnerability in Microsoft Exchange Server.
2
What is the severity of CVE-2023-36757?
CVE-2023-36757 has a severity level of high.
3
Which software versions are affected by CVE-2023-36757?
CVE-2023-36757 affects Microsoft Exchange Server 2016 (Cumulative Update 23) and Microsoft Exchange Server 2019 (Cumulative Update 12 and 13).
4
How can I fix CVE-2023-36757?
To fix CVE-2023-36757, Microsoft has released patches, which can be downloaded from their website. Update to Microsoft Exchange Server 2016 Cumulative Update 23 or Microsoft Exchange Server 2019 Cumulative Update 12 or 13.
5
Where can I find more information about CVE-2023-36757?
You can find more information about CVE-2023-36757 on the Microsoft Security Response Center website.