Microsoft Microsoft Exchange Server 2019
13 CVEs affecting Microsoft Microsoft Exchange Server 2019. Latest disclosed: 2021-03-03. Critical: 2, High: 6.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-1373 | Critical | 9.8 | 2019-11-12 | A remote code execution vulnerability exists in Microsoft Exchange through the deserialization of metadata via PowerShell, aka 'Microsoft Exchange Remote Code… |
CVE-2021-26855 | Critical | 9.1 | 2021-03-03 | Microsoft Exchange Server Remote Code Execution Vulnerability |
CVE-2019-0724 | High | 8.1 | 2019-03-05 | An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of Privilege Vulnerability'. This CVE ID… |
CVE-2021-27065 | High | 7.8 | 2021-03-03 | Microsoft Exchange Server Remote Code Execution Vulnerability |
CVE-2021-26858 | High | 7.8 | 2021-03-03 | Microsoft Exchange Server Remote Code Execution Vulnerability |
CVE-2021-26857 | High | 7.8 | 2021-03-03 | Microsoft Exchange Server Remote Code Execution Vulnerability |
CVE-2019-1233 | High | 7.5 | 2019-09-11 | A denial of service vulnerability exists in Microsoft Exchange Server software when the software fails to properly handle objects in memory, aka 'Microsoft Exc… |
CVE-2019-0686 | High | 7.4 | 2019-03-05 | An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of Privilege Vulnerability'. This CVE ID… |
CVE-2019-1084 | Medium | 6.5 | 2019-07-15 | An information disclosure vulnerability exists when Exchange allows creation of entities with Display Names having non-printable characters. An authenticated a… |
CVE-2019-1266 | Medium | 6.1 | 2019-09-11 | A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web App (OWA) fails to properly handle web requests, aka 'Microsoft Exchange Spoofing… |
CVE-2019-0858 | Medium | 6.1 | 2019-04-09 | A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access (OWA) fails to properly handle web requests, aka 'Microsoft Exchange Spoof… |
CVE-2019-1137 | Medium | 5.4 | 2019-07-15 | A cross-site-scripting (XSS) vulnerability exists when Microsoft Exchange Server does not properly sanitize a specially crafted web request to an affected Exch… |
CVE-2019-0817 | Medium | 5.4 | 2019-04-09 | A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access (OWA) fails to properly handle web requests, aka 'Microsoft Exchange Spoof… |