Advisories · Technology

Microsoft Exchange Server 2019 Cumulative Update 13.

Every CVE that names Microsoft Exchange Server 2019 Cumulative Update 13 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-49040 CVE record

CVSS 7.5 High

Microsoft Exchange Server Spoofing Vulnerability
- Microsoft Exchange Server 2019 Cumulative Update 13
- Microsoft Exchange Server 2019 Cumulative Update 14
- CWE-451
Not analysed yet 12 Nov 2024
CVE-2024-26198 CVE record

CVSS 8.8 High

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2019 Cumulative Update 14
- Microsoft Exchange Server 2019 Cumulative Update 13
- CWE-426
Not analysed yet 12 Mar 2024
CVE-2024-21410 CVE record

CVSS 9.8 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV

Microsoft Exchange Server Elevation of Privilege Vulnerability
- Microsoft Exchange Server 2016 Cumulative Update 23
- Microsoft Exchange Server 2019 Cumulative Update 13
- Authentication bypass
Not analysed yet 13 Feb 2024
CVE-2023-36035 CVE record

CVSS 8.0 HighCritical · CVSS 7+ and EPSS

Microsoft Exchange Server Spoofing Vulnerability
- Microsoft Exchange Server 2016 Cumulative Update 23
- Microsoft Exchange Server 2019 Cumulative Update 12
- Insecure deserialization
Not analysed yet 14 Nov 2023
CVE-2023-36039 CVE record

CVSS 8.0 HighCritical · CVSS 7+ and EPSS

Microsoft Exchange Server Spoofing Vulnerability
- Microsoft Exchange Server 2016 Cumulative Update 23
- Microsoft Exchange Server 2019 Cumulative Update 12
- Insecure deserialization
Not analysed yet 14 Nov 2023
CVE-2023-36050 CVE record

CVSS 8.0 HighCritical · CVSS 7+ and EPSS

Microsoft Exchange Server Spoofing Vulnerability
- Microsoft Exchange Server 2019 Cumulative Update 12
- Microsoft Exchange Server 2016 Cumulative Update 23
- Insecure deserialization
Not analysed yet 14 Nov 2023
CVE-2023-36439 CVE record

CVSS 8.0 High

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2016 Cumulative Update 23
- Microsoft Exchange Server 2019 Cumulative Update 13
- Insecure deserialization
Not analysed yet 14 Nov 2023
CVE-2023-36778 CVE record

CVSS 8.0 High

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2019 Cumulative Update 13
- Microsoft Exchange Server 2019 Cumulative Update 12
- CWE-426
Not analysed yet 10 Oct 2023
CVE-2023-36777 CVE record

CVSS 5.7 Medium

Microsoft Exchange Server Information Disclosure Vulnerability
- Microsoft Exchange Server 2019 Cumulative Update 12
- Microsoft Exchange Server 2016 Cumulative Update 23
- Insecure deserialization
Not analysed yet 12 Sept 2023
CVE-2023-36744 CVE record

CVSS 8.0 HighCritical · CVSS 7+ and EPSS

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2019 Cumulative Update 12
- Microsoft Exchange Server 2016 Cumulative Update 23
- Insecure deserialization
Not analysed yet 12 Sept 2023
CVE-2023-36745 CVE record

CVSS 8.0 HighCritical · CVSS 7+ and EPSS

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2019 Cumulative Update 13
- Microsoft Exchange Server 2019 Cumulative Update 12
- Insecure deserialization
Not analysed yet 12 Sept 2023
CVE-2023-36756 CVE record

CVSS 8.0 HighCritical · CVSS 7+ and EPSS

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2016 Cumulative Update 23
- Microsoft Exchange Server 2019 Cumulative Update 13
- Insecure deserialization
Not analysed yet 12 Sept 2023
CVE-2023-36757 CVE record

CVSS 8.0 HighCritical · CVSS 7+ and EPSS

Microsoft Exchange Server Spoofing Vulnerability
- Microsoft Exchange Server 2016 Cumulative Update 23
- Microsoft Exchange Server 2019 Cumulative Update 12
- Insecure deserialization
Not analysed yet 12 Sept 2023
CVE-2023-38181 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Microsoft Exchange Server Spoofing Vulnerability
- Microsoft Exchange Server 2016 Cumulative Update 23
- Microsoft Exchange Server 2019 Cumulative Update 12
- Insecure deserialization
Not analysed yet 8 Aug 2023
CVE-2023-38182 CVE record

CVSS 8.0 High

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2016 Cumulative Update 23
- Microsoft Exchange Server 2019 Cumulative Update 12
- Insecure deserialization
Not analysed yet 8 Aug 2023
CVE-2023-35388 CVE record

CVSS 8.0 High

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2016 Cumulative Update 23
- Microsoft Exchange Server 2019 Cumulative Update 12
- Insecure deserialization
Not analysed yet 8 Aug 2023
CVE-2023-21709 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Microsoft Exchange Server Elevation of Privilege Vulnerability
- Microsoft Exchange Server 2016 Cumulative Update 23
- Microsoft Exchange Server 2019 Cumulative Update 12
- Authentication bypass
Not analysed yet 8 Aug 2023
CVE-2023-38185 CVE record

CVSS 8.8 High

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2016 Cumulative Update 23
- Microsoft Exchange Server 2019 Cumulative Update 12
- Path traversal
Not analysed yet 8 Aug 2023
CVE-2023-35368 CVE record

CVSS 8.8 High

Microsoft Exchange Remote Code Execution Vulnerability
- Microsoft Exchange Server 2016 Cumulative Update 23
- Microsoft Exchange Server 2019 Cumulative Update 12
- CWE-20
Not analysed yet 8 Aug 2023
CVE-2023-32031 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2019 Cumulative Update 12
- Microsoft Exchange Server 2016 Cumulative Update 23
- Insecure deserialization
Not analysed yet 14 Jun 2023
CVE-2023-28310 CVE record

CVSS 8.0 HighCritical · CVSS 7+ and EPSS

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2016 Cumulative Update 23
- Microsoft Exchange Server 2019 Cumulative Update 12
- Insecure deserialization
Not analysed yet 14 Jun 2023