Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:exchange_server_2019:*:cumulative_update_14:*:*:*:*:*:*

part: a version: * update: cumulative_update_14

VendorMicrosoft (67206627-3ef6-5870-9d98-26a9f2e7065c)
ProductExchange Server 2019 (20b11731-35f7-5d55-a6fe-69acea692d6e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-42897 vulnerable 2026-06-08 08:03:16.901173 Microsoft Exchange Server Spoofing Vulnerability
HIGH (8.1)
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
Published: 2026-05-14T17:00:36.515Z
Updated: 2026-06-19T16:12:39.764Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-21527 vulnerable 2026-06-08 07:49:16.536075 Microsoft Exchange Server Spoofing Vulnerability
MEDIUM (6.5)
User interface (ui) misrepresentation of critical information in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
Published: 2026-02-10T17:51:30.280Z
Updated: 2026-05-11T21:25:31.614Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-64667 vulnerable 2026-06-08 07:39:20.085322 Microsoft Exchange Server Spoofing Vulnerability
MEDIUM (5.3)
User interface (ui) misrepresentation of critical information in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
Published: 2025-12-09T17:55:44.488Z
Updated: 2026-04-16T14:18:39.361Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-64666 vulnerable 2026-06-08 07:39:20.046893 Microsoft Exchange Server Elevation of Privilege Vulnerability
HIGH (7.5)
Improper input validation in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
Published: 2025-12-09T17:55:45.263Z
Updated: 2026-04-16T14:18:39.837Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59249 vulnerable 2026-06-08 07:35:21.381406 Microsoft Exchange Server Elevation of Privilege Vulnerability
HIGH (8.8)
Weak authentication in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
Published: 2025-10-14T17:00:42.051Z
Updated: 2026-02-26T17:47:16.347Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59248 vulnerable 2026-06-08 07:35:21.345024 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-53786 vulnerable 2026-06-08 07:31:15.454869 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-53782 vulnerable 2026-06-08 07:31:15.399005 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-33051 vulnerable 2026-06-08 07:19:01.455603 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-25007 vulnerable 2026-06-08 07:12:50.460542 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-25006 vulnerable 2026-06-08 07:12:50.457375 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-25005 vulnerable 2026-06-08 07:12:50.418010 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.