Microsoft Exchange Server 2019

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:microsoft_exchange_server_2019:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMicrosoft (67206627-3ef6-5870-9d98-26a9f2e7065c)
ProductMicrosoft Exchange Server 2019 (24747681-c1b1-5bbb-aa81-b2534c02a633)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-1373 vulnerable 2026-06-08 05:13:25.768851 Details available
A remote code execution vulnerability exists in Microsoft Exchange through the deserialization of metadata via PowerShell, aka 'Microsoft Exchange Remote Code Execution Vulnerability'.
Published: 2019-11-12T18:52:50.000Z
Updated: 2024-08-04T18:13:30.472Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-1266 vulnerable 2026-06-08 05:13:25.483371 Details available
A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web App (OWA) fails to properly handle web requests, aka 'Microsoft Exchange Spoofing Vulnerability'.
Published: 2019-09-11T21:24:59.000Z
Updated: 2024-08-04T18:13:29.651Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-1233 vulnerable 2026-06-08 05:13:25.356619 Details available
A denial of service vulnerability exists in Microsoft Exchange Server software when the software fails to properly handle objects in memory, aka 'Microsoft Exchange Denial of Service Vulnerability'.
Published: 2019-09-11T21:24:58.000Z
Updated: 2024-08-04T18:13:29.652Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-1137 vulnerable 2026-06-08 05:13:24.931018 Details available
A cross-site-scripting (XSS) vulnerability exists when Microsoft Exchange Server does not properly sanitize a specially crafted web request to an affected Exchange server, aka 'Microsoft Exchange Server Spoofing Vulnerability'.
Published: 2019-07-29T14:14:05.000Z
Updated: 2024-08-04T18:06:31.728Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-1084 vulnerable 2026-06-08 05:13:24.759860 Details available
An information disclosure vulnerability exists when Exchange allows creation of entities with Display Names having non-printable characters. An authenticated attacker could exploit this vulnerability by creating entities with invalid display names, which, when added to conversations, remain invisible. This security update addresses the issue by validating display names upon creation in Microsoft Exchange, and by rendering invalid display names correctly in Microsoft Outlook clients., aka 'Microsoft Exchange Information Disclosure Vulnerability'.
Published: 2019-07-15T18:56:21.000Z
Updated: 2024-08-04T18:06:31.581Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-0858 vulnerable 2026-06-08 05:12:20.859264 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-0817 vulnerable 2026-06-08 05:12:20.763366 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-0724 vulnerable 2026-06-08 05:12:20.551496 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-0686 vulnerable 2026-06-08 05:12:20.363472 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.