Product by Microsoft
Microsoft Exchange Server 2019
13 known vulnerabilities in Microsoft Exchange Server 2019 (Microsoft), 4 of them actively exploited (CISA KEV).
Key figures
13
Vulnerabilities
4
Actively exploited (KEV)
4
Used by ransomware
5
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2021-26855 | Microsoft Exchange Server Remote Code Execution Vulnerability In CISA KEVRansomwarealso in 24 other products | 9.1 | |
| Critical | CVE-2021-27065 | Microsoft Exchange Server Remote Code Execution Vulnerability In CISA KEVRansomwarealso in 24 other products | 7.8 | |
| Critical | CVE-2021-26857 | Microsoft Exchange Server Remote Code Execution Vulnerability In CISA KEVRansomwarealso in 24 other products | 7.8 | |
| Critical | CVE-2021-26858 | Microsoft Exchange Server Remote Code Execution Vulnerability In CISA KEVRansomwarealso in 24 other products | 7.8 | |
| Critical | CVE-2019-1373 | Microsoft Exchange Server 2019: Deserialization of Untrusted Data | 9.8 | |
| High | CVE-2019-0724 | Microsoft Exchange Server: Privilege Escalation | 8.1 | |
| High | CVE-2019-1233 | Microsoft Exchange Server 2016: Denial of Service | 7.5 | |
| High | CVE-2019-0686 | Microsoft Exchange Server: Privilege Escalation | 7.4 | |
| Medium | CVE-2019-1084 | Microsoft Outlook: Information Disclosure | 6.5 | |
| Medium | CVE-2019-0858 | Microsoft Exchange Server: Spoofing | 6.1 | |
| Medium | CVE-2019-1266 | Microsoft Exchange Server 2016: Spoofing | 6.1 | |
| Medium | CVE-2019-0817 | Microsoft Exchange Server: Spoofing | 5.4 | |
| Medium | CVE-2019-1137 | Microsoft Exchange Server 2016: Cross-Site Scripting (XSS) | 5.4 |