CVE-2019-1373: vulnerability in Microsoft Exchange Server 2013
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
8Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 22%
A remote code execution vulnerability exists in Microsoft Exchange through the deserialization of metadata via PowerShell, aka 'Microsoft Exchange Remote Code Execution Vulnerability'.
Affected products
Microsoft · Microsoft Exchange Server 2013Microsoft · Microsoft Exchange Server 2016Microsoft · Microsoft Exchange Server 2016 Cumulative Update 14Microsoft · Microsoft Exchange Server 2019Microsoft · Microsoft Exchange Server 2019 Cumulative Update 3Related CVEs — Microsoft Exchange Server 2013
In the same product, most dangerous first.
CVE-2021-26855CRITICALMicrosoft Exchange Server Remote Code Execution VulnerabilityEPSS 100.0%KEVCVE-2020-0688HIGHCVE-2020-0688EPSS 100.0%KEVCVE-2021-27065HIGHMicrosoft Exchange Server Remote Code Execution VulnerabilityEPSS 99.9%KEVCVE-2021-26857HIGHMicrosoft Exchange Server Remote Code Execution VulnerabilityEPSS 95.8%KEVCVE-2021-26858HIGHMicrosoft Exchange Server Remote Code Execution VulnerabilityEPSS 93.7%KEVCVE-2019-0724—CVE-2019-0724EPSS 23.8%