KLA11606
ACE vulnerability in Microsoft Exchange Server

Updated: 06/03/2020
Detect date
?
11/12/2019
Severity
?
Critical
Description

Unspecified vulnerability was found in Exchange Server. Malicious users can exploit this vulnerability to execute arbitrary code.

Affected products

Microsoft Exchange Server 2016 Cumulative Update 14
Microsoft Exchange Server 2019 Cumulative Update 3
Microsoft Exchange Server 2019 Cumulative Update 2
Microsoft Exchange Server 2013 Cumulative Update 23
Microsoft Exchange Server 2016 Cumulative Update 13

Solution

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Original advisories

CVE-2019-1373

Impacts
?
ACE 
[?]
Related products
Microsoft Exchange Server
CVE-IDS
?
CVE-2019-13737.5Critical
Microsoft official advisories
Microsoft Security Update Guide
KB list

4523171

Find out the statistics of the vulnerabilities spreading in your region