# Microsoft Exchange Server 2019 Cumulative Update 13.

Every CVE that names Microsoft Exchange Server 2019 Cumulative Update 13 among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Microsoft Exchange Server Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2024-49040.md)
  `CVE-2024-49040` · CVE record: Microsoft Microsoft Exchange Server 2019 Cumulative Update 13 and 2 more · CVSS 7.5 High · Not analysed yet · Published 12 Nov 2024 · Tags: CWE-451
- [Microsoft Exchange Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-26198.md)
  `CVE-2024-26198` · CVE record: Microsoft Microsoft Exchange Server 2019 Cumulative Update 14 and 2 more · CVSS 8.8 High · Not analysed yet · Published 12 Mar 2024 · Tags: CWE-426
- [Microsoft Exchange Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-21410.md)
  `CVE-2024-21410` · CVE record: Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 and 2 more · CVSS 9.8 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.13 · Not analysed yet · Published 13 Feb 2024 · Tags: Authentication bypass
- [Microsoft Exchange Server Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2023-36035.md)
  `CVE-2023-36035` · CVE record: Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 and 2 more · CVSS 8.0 High · Critical (CVSS 7+ and EPSS) · EPSS 0.87 · Not analysed yet · Published 14 Nov 2023 · Tags: Insecure deserialization
- [Microsoft Exchange Server Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2023-36039.md)
  `CVE-2023-36039` · CVE record: Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 and 2 more · CVSS 8.0 High · Critical (CVSS 7+ and EPSS) · EPSS 0.73 · Not analysed yet · Published 14 Nov 2023 · Tags: Insecure deserialization
- [Microsoft Exchange Server Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2023-36050.md)
  `CVE-2023-36050` · CVE record: Microsoft Microsoft Exchange Server 2019 Cumulative Update 12 and 2 more · CVSS 8.0 High · Critical (CVSS 7+ and EPSS) · EPSS 0.39 · Not analysed yet · Published 14 Nov 2023 · Tags: Insecure deserialization
- [Microsoft Exchange Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-36439.md)
  `CVE-2023-36439` · CVE record: Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 and 2 more · CVSS 8.0 High · Not analysed yet · Published 14 Nov 2023 · Tags: Insecure deserialization
- [Microsoft Exchange Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-36778.md)
  `CVE-2023-36778` · CVE record: Microsoft Microsoft Exchange Server 2019 Cumulative Update 13 and 2 more · CVSS 8.0 High · Not analysed yet · Published 10 Oct 2023 · Tags: CWE-426
- [Microsoft Exchange Server Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2023-36777.md)
  `CVE-2023-36777` · CVE record: Microsoft Microsoft Exchange Server 2019 Cumulative Update 12 and 2 more · CVSS 5.7 Medium · EPSS 0.52 · Not analysed yet · Published 12 Sept 2023 · Tags: Insecure deserialization
- [Microsoft Exchange Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-36744.md)
  `CVE-2023-36744` · CVE record: Microsoft Microsoft Exchange Server 2019 Cumulative Update 12 and 2 more · CVSS 8.0 High · Critical (CVSS 7+ and EPSS) · EPSS 0.57 · Not analysed yet · Published 12 Sept 2023 · Tags: Insecure deserialization
- [Microsoft Exchange Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-36745.md)
  `CVE-2023-36745` · CVE record: Microsoft Microsoft Exchange Server 2019 Cumulative Update 13 and 2 more · CVSS 8.0 High · Critical (CVSS 7+ and EPSS) · EPSS 0.76 · Not analysed yet · Published 12 Sept 2023 · Tags: Insecure deserialization
- [Microsoft Exchange Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-36756.md)
  `CVE-2023-36756` · CVE record: Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 and 2 more · CVSS 8.0 High · Critical (CVSS 7+ and EPSS) · EPSS 0.49 · Not analysed yet · Published 12 Sept 2023 · Tags: Insecure deserialization
- [Microsoft Exchange Server Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2023-36757.md)
  `CVE-2023-36757` · CVE record: Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 and 2 more · CVSS 8.0 High · Critical (CVSS 7+ and EPSS) · EPSS 0.37 · Not analysed yet · Published 12 Sept 2023 · Tags: Insecure deserialization
- [Microsoft Exchange Server Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2023-38181.md)
  `CVE-2023-38181` · CVE record: Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 and 2 more · CVSS 8.8 High · Critical (CVSS 7+ and EPSS) · EPSS 0.11 · Not analysed yet · Published 8 Aug 2023 · Tags: Insecure deserialization
- [Microsoft Exchange Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-38182.md)
  `CVE-2023-38182` · CVE record: Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 and 2 more · CVSS 8.0 High · Not analysed yet · Published 8 Aug 2023 · Tags: Insecure deserialization
- [Microsoft Exchange Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-35388.md)
  `CVE-2023-35388` · CVE record: Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 and 2 more · CVSS 8.0 High · Not analysed yet · Published 8 Aug 2023 · Tags: Insecure deserialization
- [Microsoft Exchange Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2023-21709.md)
  `CVE-2023-21709` · CVE record: Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 and 2 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Aug 2023 · Tags: Authentication bypass
- [Microsoft Exchange Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-38185.md)
  `CVE-2023-38185` · CVE record: Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 and 2 more · CVSS 8.8 High · Not analysed yet · Published 8 Aug 2023 · Tags: Path traversal
- [Microsoft Exchange Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-35368.md)
  `CVE-2023-35368` · CVE record: Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 and 2 more · CVSS 8.8 High · Not analysed yet · Published 8 Aug 2023 · Tags: CWE-20
- [Microsoft Exchange Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-32031.md)
  `CVE-2023-32031` · CVE record: Microsoft Microsoft Exchange Server 2019 Cumulative Update 12 and 2 more · CVSS 8.8 High · Critical (CVSS 7+ and EPSS) · EPSS 0.81 · Not analysed yet · Published 14 Jun 2023 · Tags: Insecure deserialization
- [Microsoft Exchange Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-28310.md)
  `CVE-2023-28310` · CVE record: Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 and 2 more · CVSS 8.0 High · Critical (CVSS 7+ and EPSS) · EPSS 0.25 · Not analysed yet · Published 14 Jun 2023 · Tags: Insecure deserialization

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=microsoft-exchange-server-2019-cumulative-update-13>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/microsoft-exchange-server-2019-cumulative-update-13/>. Everything for agents: <https://agentprime.io/llms.txt>.