CVE-2019-1373: falha em Microsoft Exchange Server 2013
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
8Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 22%
A remote code execution vulnerability exists in Microsoft Exchange through the deserialization of metadata via PowerShell, aka 'Microsoft Exchange Remote Code Execution Vulnerability'.
Produtos afetados
Microsoft · Microsoft Exchange Server 2013Microsoft · Microsoft Exchange Server 2016Microsoft · Microsoft Exchange Server 2016 Cumulative Update 14Microsoft · Microsoft Exchange Server 2019Microsoft · Microsoft Exchange Server 2019 Cumulative Update 3CVEs relacionadas — Microsoft Exchange Server 2013
No mesmo produto, das mais perigosas para as menos.
CVE-2021-26855CRITICALMicrosoft Exchange Server Remote Code Execution VulnerabilityEPSS 100.0%KEVCVE-2020-0688HIGHCVE-2020-0688EPSS 100.0%KEVCVE-2021-27065HIGHMicrosoft Exchange Server Remote Code Execution VulnerabilityEPSS 99.9%KEVCVE-2021-26857HIGHMicrosoft Exchange Server Remote Code Execution VulnerabilityEPSS 95.8%KEVCVE-2021-26858HIGHMicrosoft Exchange Server Remote Code Execution VulnerabilityEPSS 93.7%KEVCVE-2019-0724—CVE-2019-0724EPSS 23.8%