Nessus Says "Security Updates for Exchange (February 2019)" in Exchange 2016 (CU17) High Vulnerability

Question

Hello Support,

My Exchange Sever 2016 (CU17)
When i run Nessus tool says that "Security Updates for Exchange (February 2019)"

https://www.tenable.com/plugins/nessus/122129

Solution
Microsoft has released the following security updates to address this issue:
-KB4345836
-KB4471391
-KB4471392
-KB4487052

if i see below the links: KB is not availble in WSUS Server
https://support.microsoft.com/en-us/help/4345836
Install
Cumulative Update 22 for Exchange Server 2013

https://support.microsoft.com/en-us/help/4471391
Cumulative Update 1 for Exchange Server 2019

https://support.microsoft.com/en-us/help/4471392
Cumulative Update 12 for Exchange Server 2016

https://support.microsoft.com/en-us/help/4487052
https://support.microsoft.com/en-us/topic/update-rollup-26-for-exchange-server-2010-service-pack-3-822bd815-bb87-9202-8484-b5aa5923ef4c

i was wondering when my Exchange Server is running 2016 CU17
why does it appear in Nessus scan to install Exchange Old CUs?

How to fix this issue to Nessus should not detect ?

Answer 1

Hi,

Based on my research, this issue has been addressed in Exchange 2016 CU12 and it is also included in the later CU.

So, I believe that the scanning tool needs to be updated or its better to check with the Nessus scan support forum.

If the above suggestion helps, please click on "Accept Answer" and upvote it

Answer 2

You are correct, looks Nessus version 4 times older.

i will keep you posted once it is updated - Thanks