Multiple vulnerabilities in Microsoft Exchange Server

Description

Multiple vulnerabilities were found in Microsoft Exchange Server. Malicious users can exploit these vulnerabilities to spoof user interface, gain privileges, obtain sensitive information.

Below is a complete list of vulnerabilities:

1. A spoofing vulnerability in Microsoft Exchange Server can be exploited remotely via specially crafted web to spoof user interface.
2. An elevation of privilege vulnerability in Microsoft Exchange Server can be exploited remotely to gain privileges.
3. An information disclosure vulnerability in Microsoft Exchange can be exploited remotely to obtain sensitive information.

Original advisories

• CVE-2019-1137

• CVE-2019-1136
• CVE-2019-1084
• ADV190021

Related products

• Microsoft-Exchange-Server

CVE list

• CVE-2019-1084
  warning
• CVE-2019-1137
  warning
• CVE-2019-1136
  high

KB list

• 4509410
• 4509409
• 4509408

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com