Microsoft Exchange Server 2019 (Microsoft) - vulnerabilities (CVEs)

9 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2019-11-12. Vendor: Microsoft.

CVEs of Microsoft Exchange Server 2019

CVE-2019-1373 - CVSS 9.8 (critical), 2019-11-12: A remote code execution vulnerability exists in Microsoft Exchange through the deserialization of metadata via PowerShell, aka 'Microsoft Exchange Remote Code…
CVE-2019-1266 - CVSS 6.1 (medium), 2019-09-11: A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web App (OWA) fails to properly handle web requests, aka 'Microsoft Exchange…
CVE-2019-1233 - CVSS 7.5 (high), 2019-09-11: A denial of service vulnerability exists in Microsoft Exchange Server software when the software fails to properly handle objects in memory, aka 'Microsoft…
CVE-2019-1137 - CVSS 5.4 (medium), 2019-07-15: A cross-site-scripting (XSS) vulnerability exists when Microsoft Exchange Server does not properly sanitize a specially crafted web request to an affected…
CVE-2019-1084 - CVSS 6.5 (medium), 2019-07-15: An information disclosure vulnerability exists when Exchange allows creation of entities with Display Names having non-printable characters. An authenticated…
CVE-2019-0858 - CVSS 6.1 (medium), 2019-04-09: A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access (OWA) fails to properly handle web requests, aka 'Microsoft Exchange…
CVE-2019-0817 - CVSS 5.4 (medium), 2019-04-09: A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access (OWA) fails to properly handle web requests, aka 'Microsoft Exchange…
CVE-2019-0724 - CVSS 8.1 (high), 2019-03-05: An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of Privilege Vulnerability'. This CVE ID…
CVE-2019-0686 - CVSS 7.4 (high), 2019-03-05: An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of Privilege Vulnerability'. This CVE ID…