CVE-2022-34692

Published: Aug 9, 2022Modified: Jun 17, 2026

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 3.9 / Impact: 1.4

Source: secure@microsoft.com (Secondary)

Description

Microsoft Exchange Server Information Disclosure Vulnerability

Affected (4)

Products: Microsoft: Exchange Server

1 product

Exchange Server

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Microsoft Exchange Server	Version 2016 cumulative_update_22
Microsoft Exchange Server	Version 2016 cumulative_update_23
Microsoft Exchange Server	Version 2019 cumulative_update_11
Microsoft Exchange Server	Version 2019 cumulative_update_12

Related CWEs

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34692

Source: secure@microsoft.com

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34692

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.