Microsoft Microsoft Exchange Server 2019
13 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2021-27065 | | Microsoft Exchange Server Remote Code Execution Vulnerability | HIGH 7.8 | 100 % | KEV | |
| CVE-2021-26858 | | Microsoft Exchange Server Remote Code Execution Vulnerability | HIGH 7.8 | 94 % | KEV | |
| CVE-2021-26857 | | Microsoft Exchange Server Remote Code Execution Vulnerability | HIGH 7.8 | 96 % | KEV | |
| CVE-2021-26855 | | Microsoft Exchange Server Remote Code Execution Vulnerability | CRITICAL 9.8 | 100 % | KEV | |
| CVE-2019-1373 | Cumulative Update 2 | A remote code execution vulnerability exists in Microsoft Exchange through the deserialization of metadata via PowerShell, aka 'Microsoft Ex | CRITICAL 9.8 | 22 % | ||
| CVE-2019-1266 | Cumulative Update 1 ; Cumulative Update 2 | A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web App (OWA) fails to properly handle web requests, aka 'Microsof | MEDIUM 6.1 | 2.0 % | ||
| CVE-2019-1233 | Cumulative Update 1 ; Cumulative Update 2 | A denial of service vulnerability exists in Microsoft Exchange Server software when the software fails to properly handle objects in memory, | HIGH 7.5 | 6.2 % | ||
| CVE-2019-1137 | Cumulative Update 1 ; Cumulative Update 2 | A cross-site-scripting (XSS) vulnerability exists when Microsoft Exchange Server does not properly sanitize a specially crafted web request | MEDIUM 5.4 | 1.6 % | ||
| CVE-2019-1084 | | An information disclosure vulnerability exists when Exchange allows creation of entities with Display Names having non-printable characters. | MEDIUM 6.5 | 5.3 % | ||
| CVE-2019-0858 | Cumulative Update 1 | A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access (OWA) fails to properly handle web requests, aka 'Micro | MEDIUM 6.1 | 2.1 % | ||
| CVE-2019-0817 | Cumulative Update 1 | A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access (OWA) fails to properly handle web requests, aka 'Micro | MEDIUM 5.4 | 2.3 % | ||
| CVE-2019-0724 | Cumulative Update 1 | An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of Privilege Vulnerabi | HIGH 8.1 | 24 % | ||
| CVE-2019-0686 | Cumulative Update 1 | An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of Privilege Vulnerabi | HIGH 7.4 | 5.0 % |