Microsoft Exchange Server 2019 Cumulative Update 2

CPE Details

Microsoft Exchange Server 2019 Cumulative Update 2
microsoft
exchange_server
2019
2019-11-05
15h05 +00:00
2019-11-05
15h05 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_2:*:*:*:*:*:*

Informations

Vendor

microsoft

Product

exchange_server

Version

2019

Update

cumulative_update_2

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2024-49040 2024-11-12 17h53 +00:00 Microsoft Exchange Server Spoofing Vulnerability
7.5
High
CVE-2024-26198 2024-03-12 16h57 +00:00 Microsoft Exchange Server Remote Code Execution Vulnerability
8.8
High
CVE-2023-36777 2023-09-12 16h58 +00:00 Microsoft Exchange Server Information Disclosure Vulnerability
5.7
Medium
CVE-2023-21709 2023-08-08 17h08 +00:00 Microsoft Exchange Server Elevation of Privilege Vulnerability
9.8
Critical
CVE-2021-27065 2021-03-02 23h55 +00:00 Microsoft Exchange Server Remote Code Execution Vulnerability
7.8
High
CVE-2021-26858 2021-03-02 23h55 +00:00 Microsoft Exchange Server Remote Code Execution Vulnerability
7.8
High
CVE-2021-26855 2021-03-02 23h55 +00:00 Microsoft Exchange Server Remote Code Execution Vulnerability
9.8
Critical
CVE-2021-26857 2021-03-02 23h55 +00:00 Microsoft Exchange Server Remote Code Execution Vulnerability
7.8
High
CVE-2019-1373 2019-11-12 17h52 +00:00 A remote code execution vulnerability exists in Microsoft Exchange through the deserialization of metadata via PowerShell, aka 'Microsoft Exchange Remote Code Execution Vulnerability'.
9.8
Critical
CVE-2019-1266 2019-09-11 19h24 +00:00 A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web App (OWA) fails to properly handle web requests, aka 'Microsoft Exchange Spoofing Vulnerability'.
6.1
Medium
CVE-2019-1233 2019-09-11 19h24 +00:00 A denial of service vulnerability exists in Microsoft Exchange Server software when the software fails to properly handle objects in memory, aka 'Microsoft Exchange Denial of Service Vulnerability'.
7.5
High
CVE-2019-1137 2019-07-29 12h14 +00:00 A cross-site-scripting (XSS) vulnerability exists when Microsoft Exchange Server does not properly sanitize a specially crafted web request to an affected Exchange server, aka 'Microsoft Exchange Server Spoofing Vulnerability'.
5.4
Medium
CVE-2012-2284 2012-10-18 15h00 +00:00 The (1) install and (2) upgrade processes in EMC NetWorker Module for Microsoft Applications (NMM) 2.2.1, 2.3 before build 122, and 2.4 before build 375, when Exchange Server is used, allow local users to read cleartext administrator credentials via unspecified vectors.
2.1
CVE-2011-0290 2011-10-21 08h00 +00:00 The BlackBerry Collaboration Service in Research In Motion (RIM) BlackBerry Enterprise Server (BES) 5.0.3 through MR4 for Microsoft Exchange and Lotus Domino allows remote authenticated users to log into arbitrary user accounts associated with the same organization, and send messages, read messages, read contact lists, or cause a denial of service (login unavailability), via unspecified vectors.
6.5
CVE-1999-1322 2001-09-12 02h00 +00:00 The installation of 1ArcServe Backup and Inoculan AV client modules for Exchange create a log file, exchverify.log, which contains usernames and passwords in plaintext.
4.6
CVE-2000-0216 2000-03-22 04h00 +00:00 Microsoft email clients in Outlook, Exchange, and Windows Messaging automatically respond to Read Receipt and Delivery Receipt tags, which could allow an attacker to flood a mail system with responses by forging a Read Receipt request that is redirected to a large distribution list.
5