CVE-2019-0724

CVE-2019-0724: vulnerability in Microsoft Exchange Server 2010

Published · Updated

23Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 24%
from disclosure to weapon0 days
Published on NVDMar 6
metasploitJan 21
exploitation probability
24%top 2% of all CVEs
observed exploitation
nono source reports it
An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0686.
Affected products
Microsoft · Microsoft Exchange Server 2010Microsoft · Microsoft Exchange Server 2013Microsoft · Microsoft Exchange Server 2016Microsoft · Microsoft Exchange Server 2019
Related CVEs — Microsoft Exchange Server 2010

In the same product, most dangerous first.

CVE-2020-0688HIGHCVE-2020-0688EPSS 100.0%KEVCVE-2019-1373—CVE-2019-1373EPSS 21.7%CVE-2019-1233—CVE-2019-1233EPSS 6.2%CVE-2019-1084—CVE-2019-1084EPSS 5.3%CVE-2019-0686—CVE-2019-0686EPSS 5.0%CVE-2019-1136—CVE-2019-1136EPSS 3.4%
References
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0724http://www.securityfocus.com/bid/106906