Microsoft Exchange Server 2019 Cumulative Update 1

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_1:*:*:*:*:*:*

part: a version: 2019 update: cumulative_update_1

VendorMicrosoft (67206627-3ef6-5870-9d98-26a9f2e7065c)
ProductExchange Server (17dc5bb6-7963-5a93-8e97-6e9d34085c50)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-42897 vulnerable 2026-06-08 08:03:16.941284 Microsoft Exchange Server Spoofing Vulnerability
HIGH (8.1)
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
Published: 2026-05-14T17:00:36.515Z
Updated: 2026-06-19T16:12:39.764Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-64667 vulnerable 2026-06-08 07:39:20.086715 Microsoft Exchange Server Spoofing Vulnerability
MEDIUM (5.3)
User interface (ui) misrepresentation of critical information in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
Published: 2025-12-09T17:55:44.488Z
Updated: 2026-04-16T14:18:39.361Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-64666 vulnerable 2026-06-08 07:39:20.074643 Microsoft Exchange Server Elevation of Privilege Vulnerability
HIGH (7.5)
Improper input validation in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
Published: 2025-12-09T17:55:45.263Z
Updated: 2026-04-16T14:18:39.837Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59249 vulnerable 2026-06-08 07:35:21.382762 Microsoft Exchange Server Elevation of Privilege Vulnerability
HIGH (8.8)
Weak authentication in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
Published: 2025-10-14T17:00:42.051Z
Updated: 2026-02-26T17:47:16.347Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59248 vulnerable 2026-06-08 07:35:21.371020 Microsoft Exchange Server Spoofing Vulnerability
HIGH (7.5)
Improper input validation in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
Published: 2025-10-14T17:01:42.916Z
Updated: 2026-02-22T17:26:02.096Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-53782 vulnerable 2026-06-08 07:31:15.420571 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-33051 vulnerable 2026-06-08 07:19:01.485165 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-25007 vulnerable 2026-06-08 07:12:50.462445 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-25006 vulnerable 2026-06-08 07:12:50.458776 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-25005 vulnerable 2026-06-08 07:12:50.442495 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-49040 vulnerable 2026-06-08 06:50:12.164483 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-26198 vulnerable 2026-06-08 06:31:25.428566 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-36777 vulnerable 2026-06-08 06:08:13.373967 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-21709 vulnerable 2026-06-08 05:54:22.095216 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-27065 vulnerable 2026-06-08 05:30:45.851808 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26858 vulnerable 2026-06-08 05:30:45.308823 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26857 vulnerable 2026-06-08 05:30:45.304871 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26855 vulnerable 2026-06-08 05:30:45.295822 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-1266 vulnerable 2026-06-08 05:13:25.483555 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-1233 vulnerable 2026-06-08 05:13:25.356681 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-1137 vulnerable 2026-06-08 05:13:24.956388 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-0858 vulnerable 2026-06-08 05:12:20.859443 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-0817 vulnerable 2026-06-08 05:12:20.764766 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-0724 vulnerable 2026-06-08 05:12:20.570702 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-0686 vulnerable 2026-06-08 05:12:20.365957 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.