Released: August 2023 Exchange Server Security Updates

ceantuco The "last updated" date on CSS-Exchange script documents is broken (we will figure out why). No, this was not disclosed nor addressed in January. It was disclosed / CVE was published on 8/8 and to address it, customers need to take action (either via our script or manual action as documented on the CVE document itself). It is a bit of unusual because generally speaking, to address an Exchange related CVE, you'd install an Exchange update, but in this case this CVE does not have a hard dependency on August SU as it is a change in IIS configuration. We recommend installing August SU first, but that is because we always recommend installing our SUs. The CVE can be addressed independently from application of the August SU, though.