Multiple vulnerabilities in Microsoft Exchange Server

Beschreibung

Multiple vulnerabilities were found in Microsoft Exchange Server. Malicious users can exploit these vulnerabilities to spoof user interface, gain privileges, obtain sensitive information.

Below is a complete list of vulnerabilities:

1. A spoofing vulnerability in Microsoft Exchange Server can be exploited remotely via specially crafted web to spoof user interface.
2. An elevation of privilege vulnerability in Microsoft Exchange Server can be exploited remotely to gain privileges.
3. An information disclosure vulnerability in Microsoft Exchange can be exploited remotely to obtain sensitive information.

Ursprüngliche Informationshinweise

• CVE-2019-1137

• CVE-2019-1136
• CVE-2019-1084
• ADV190021

Betroffene Produkte

• Microsoft-Exchange-Server

CVE Liste

• CVE-2019-1084
  warning
• CVE-2019-1137
  warning
• CVE-2019-1136
  high

KB Liste

• 4509410
• 4509409
• 4509408

Mehr erfahren

Informieren Sie sich über die Statistiken der in Ihrer Region verbreiteten Sicherheitslücken statistics.securelist.com